• For now I'm not sure if this option should be added to all commands that have auditing (similar to how --audit-format is implemented. I'd like input on that. If it won't be included in all commands, I will just move the body of getAuditAbandoned in AuditCommand.

• In AuditCammand, I removed null coalescing from $auditConfig['abandoned'] because I thought it'd be cleaner to let getAuditAbandoned handle the default values.

  One way to tackle it is to modify Composer/Config.php to make the abandoned key always present, even if null in array{ignore?: mixed, abandoned?: 'fail'|'ignore'|'report'|null}.

• For now I'm not sure if this option should be added to all commands that have auditing (similar to how --audit-format is implemented. I'd like input on that. If it won't be included in all commands, I will just move the body of getAuditAbandoned in AuditCommand.

I think I would just add it to AuditCommand for now to avoid polluting everything with this option which I doubt will see widesrpead use.

• In AuditCammand, I removed null coalescing from $auditConfig['abandoned'] because I thought it'd be cleaner to let getAuditAbandoned handle the default values.

  One way to tackle it is to modify Composer/Config.php to make the abandoned key always present, even if null in array{ignore?: mixed, abandoned?: 'fail'|'ignore'|'report'|null}.

You can't change that, you'd need to change ConfigReturnTypeExtension to somehow return a non-nullable abandoned key, because Config already ensures that abandoned is always set and not null, it's just that phpstan is not aware of it..