chartmogul/chartmogul-php
A long release history, regular recent releases, and release notes make the project easier to trust. It also has tests, a changelog, security scanning, and an organization behind it.
72%
Total Score
67
100
100
83
Health Score Breakdown
All recent commits came from one contributor, giving the repository a concentrated short-term bus factor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.
Only one commit was recorded in the last three months from one active maintainer. Recent releases and pull requests partly offset this, but the observed coding activity is still thin.
All three workflows were analyzed successfully, all 16 action references are pinned, and no untrusted checkout or script injection was found. One low-confidence cache-poisoning finding is hygiene-level only under the audit rules; one workflow grants top-level write permission, which is a mild concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ChartMogul Ltd. |
| Mahmudul Hassan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.8 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
php-http/discovery Version ^1.13 | — | — |
stechstudio/backoff Version ^1.0 | — | — |
doctrine/collections Version ^1.6 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.