Plumb checks now explain themselves in plain language, and each one links to a practical guide: SHA-pinning Actions, adding a SECURITY.md, setting an update cooldown, trimming your dist archive. Free, no sign-up.
Mechanically-verifiable scores for PHP packages. Security, maintenance, ecosystem health — every result explainable down to the check. 📐

