andig/php-shunting-yard
Tests, a clear README, release notes, and a small dependency surface make the library straightforward to evaluate. Licensing is clear, but the project has limited security oversight and appears lightly maintained.
56%
Total Score
50
100
86
50
Health Score Breakdown
The package has had no releases in the past 12 months and only three releases since October 2017. This is a substantial maintenance concern for a dependency, although the release history is consistent with a small, stable library.
The repository recorded no commits and no active maintainers in the last three months, with its last push about 7 years ago. That leaves little evidence of ongoing maintenance or responsiveness.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a meaningful gap, though the package has a small dependency surface.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.