@phc/format
PHC string format serializer/deserializer
58%
Total Score
caution
Usable with caveats: nearly six years without a release and no recent commits point to a dormant project.
Health Score Breakdown
The package has 15 releases since March 2018, but none in the last 12 months and the latest release was in July 2020. This is meaningful abandonment risk for a dependency, despite its established release history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That leaves limited evidence of active maintenance.
The repository has no security policy, leaving no documented route for reporting vulnerabilities. This is a transparency gap, though the repository does use Snyk scanning.
All four workflows were analyzed successfully and no dangerous audit findings or untrusted checkouts were reported. However, all 11 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.