amphp/socket
The organization-backed project has a long release history and published release notes, with tests, security tooling, and a security policy. Recent work is concentrated in one contributor, and all four workflow actions are unpinned, so maintenance resilience and build reproducibility are weaker than the overall project maturity.
82%
Total Score
83
100
100
Health Score Breakdown
All six recent commits came from one contributor, creating a real continuity risk. Organization backing provides some handoff capacity but does not remove the concentration concern.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injections, or audit findings. However, all four action references are unpinned, leaving a modest build-reproducibility and action-integrity gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Lowrey |
| Aaron Piotrowski |
| Niklas Keller |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 amphp/amp Version ^3 | — | — |
amphp/dns Version ^2 | — | — |
league/uri Version ^7 | — | — |
amphp/byte-stream Version ^2 | — | — |
revolt/event-loop Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.