Package Health

amashukov/rector-php-rules

Opinionated Rector rules for PHP — strict-assertion enforcement, no @phpstan-ignore, no env-checks in src, no superglobals, PSR Clock requirement, no direct DB / event-dispatch / assert() inside functional tests, and a comment-stripper that keeps only PHPStan tag blocks.

Latest v0.4.1PackagistPackagist

67%

Total Score

caution

A young package with only two releases and one active contributor, despite a matching repository and recent maintenance.

Health Score Breakdown

Release historycaution

The package is only 141 days old and has had two releases, with a median interval of about 142 days. This is limited history rather than abandonment, but it leaves maturity and cadence uncertain.

Repo bus factorcaution

One contributor made 100% of the two recent commits. This creates a single-maintainer continuity risk, with no evidence of a broader handoff path.

Repo commit activitycaution

Only two commits were recorded in the last three months, from one active maintainer. Recent activity exists, but the pace is thin for a young package.

Repo toolingcaution

The repository uses Make and Composer, but no security-scanning tools were detected. The build structure is present, while security automation is limited.

Security policycaution

No repository security policy was found. This is a transparency and maintenance gap, though it is not evidence of a security defect by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

VersionPublishedVulnerabilities
v0.4.13 Oct 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v0.4.029 May 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total

Maintainers

Andrei Mashukov

Direct Dependencies

DependencyLast ReleaseScore
rector/rector
Version ^2.0
—
—
nikic/php-parser
Version ^5.0
—
—
symplify/rule-doc-generator-contracts
Version ^11.2 || ^12.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
5 months ago

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.

No credit card required | Scan results in 32 seconds.

Trusted by 150k+ orgs
  • Revolut
  • n8n
  • Lovable
  • Deel
  • Prove
  • Omnea