attributes-php/validation
It has tests, a clear MIT license, and a matching organization-owned repository. Five workflow actions are unpinned and the project has no security policy, which weakens maintenance confidence.
61%
Total Score
75
100
86
75
Health Score Breakdown
The package has 15 releases and a rapid median interval of about 5 days, but no releases in the last 12 months despite being about 494 days old. That long release gap is a meaningful maintenance concern.
The repository recorded no commits and no active maintainers in the last 3 months. The repository was pushed more recently overall, but the current inactivity still weakens confidence in ongoing maintenance.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little external evidence of broad adoption or review.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself show that the package is unsafe.
Both workflows use read-only permissions and the audit found no untrusted checkouts, script injection, or other findings. However, all 5 action references are unpinned, leaving avoidable build reproducibility and action-update risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 respect/validation Version ^2.0 | — | — |
attributes-php/options Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.