adriengras/umami-php
Documentation is unusually complete, and the MIT license plus repository/package name match make adoption straightforward. The workflow is read-only and audited cleanly, but its four action references are unpinned.
74%
Total Score
100
100
86
75
Health Score Breakdown
The package is only 87 days old and has three releases, all clustered closely together, so long-term maintenance is not yet demonstrated.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a severe maintenance risk.
The repository has no security policy, leaving vulnerability reporting expectations unclear for a library that handles API authentication and administrative endpoints.
The sole workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adrien Gras |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 saloonphp/saloon Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.