PHP client library for Coveralls API
38%
Total Score
unhealthy
Risky: one release and no recent repository activity strongly suggest this package is abandoned.
The package has only one release, published about 2 years and 10 months ago, with no releases in the last 12 months. This is strong evidence of limited maintenance activity.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the release history's abandonment concern.
The linked repository name does not match the package name and its README does not mention this package, so the repository may not actually represent the published package.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities, although this is secondary to the maintenance concerns.
Both workflows were fully analyzed with no high-confidence findings or dangerous triggers, but all 12 action references are unpinned. That leaves avoidable build reproducibility and action-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
symfony/yaml Version ^2.0.5 || ^3.0 || ^4.0 || ^5.0 || ^6.0 || ^7.0 | — | — |
symfony/config Version ^2.1 || ^3.0 || ^4.0 || ^5.0 || ^6.0 || ^7.0 | — | — |
symfony/console Version ^2.1 || ^3.0 || ^4.0 || ^5.0 || ^6.0 || ^7.0 | — | — |
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.