Package Health

adachsoft/php-code-tools

This is a reasonably well-packaged but still young PHP library. The release history shows seven releases over 165 days with a median interval of about 14 days, and the artifact includes a substantial README, changelog, PHPUnit configuration, and extensive unit tests. The MIT manifest declaration, absence of install-time lifecycle scripts, and non-deprecated registry status are positive. However, the package remains on the 0.x version line, has no declared source repository, and therefore provides limited transparency into ongoing maintenance, review, and provenance; repository activity and backing cannot be assessed. It is usable as a dependency, but adoption should account for its early maturity and limited verifiability.

Latest v0.6.0PackagistPackagist

72%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Dependency profilecaution

The package declares six runtime dependencies, including several ecosystem-specific libraries, creating moderate coupling and some transitive maintenance exposure; no severe dependency issue is shown by this signal alone.

Version stabilitycaution

The assessed version is a non-prerelease 0.6.0, but the 0.x major line signals an API that may still evolve and a project that has not yet demonstrated mature long-term stability.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arkadiusz Adach

Direct Dependencies

DependencyLast ReleaseScore
phpstan/phpstan
Version ^2.1
adachsoft/ai-tool-call
Version ^2.0
adachsoft/php-code-reader
Version ^0.6.0
adachsoft/static-class-finder
Version ^0.2.0 || ^0.3.0
adachsoft/normalized-safe-path
Version ^0.1

Weekly Downloads

Info

Last Published
14 days ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform