alexandre-daubois/phikl

The package includes a clear MIT license, a useful README, tests, and release notes for this version. Its workflow uses read-only job permissions but leaves all three action references unpinned, and the repository has no security policy or scanning.

Latest 0.8.5

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 15 releases, but its latest release was June 13, 2024 and it has had no releases in the last 12 months despite being about 947 days old. This is meaningful abandonment risk for a dependency.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no recent activity demonstrating ongoing maintenance.

Project backing

The package and repository are owned by the same individual account, so the source ownership is consistent. Individual ownership also means the project does not show organizational backing to offset its thin maintenance base.

Repo tooling

Composer is used for builds, but no security scanning tools are detected. This is a maintenance and transparency gap, though it is less serious than the lack of recent activity.

Security policy

The repository has no security policy. That weakens the project's documented process for receiving and handling security reports.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexandre Daubois

Direct Dependencies

Dependency	Last Release	Score
symfony/finder Version ^6.4\|^7.0	—	—
symfony/console Version ^6.4\|^7.0	—	—
symfony/process Version ^6.4\|^7.0	—	—
psr/simple-cache Version ^3.0	—	—