Package Health

becklyn/php-cs

Its BSD-3-Clause license, matching repository, and documented setup are clear, but security scanning and a security policy are absent. Pin version 19 and verify compatibility with current PHP tooling before adoption.

Latest 19PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has 55 releases since July 2018, but its latest release was December 12, 2022, with no releases in the last four years. This indicates substantial maintenance stagnation despite a previously regular release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with the package having stopped changing after its final 2022 release. The unarchived repository and stable major version provide limited compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens assurance around ongoing maintenance, especially alongside the lack of recent activity.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it does not by itself show that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Becklyn Studios

Direct Dependencies

DependencyLast ReleaseScore
phpstan/phpstan
Version ^1.4.6
—
—
phpstan/phpstan-symfony
Version ^1.1.5
—
—
phpstan/phpstan-doctrine
Version ^1.2.10
—
—
friendsofphp/php-cs-fixer
Version ^v3.6.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform