codemasher/php-ext-xz
It includes tests, a substantial README, release notes for this version, and a clear license. Two contributors made four commits in the last three months, though all seven workflow actions are unpinned and no security policy is present.
82%
Total Score
67
94
50
Health Score Breakdown
The package and repository are owned by the same individual account, so there is no organization-level handoff capacity shown; the recent second contributor partly offsets that limitation.
The top contributor made 75% of the four recent commits, creating some concentration risk, but a second contributor remains active.
The repository uses Composer build tooling, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of abandonment.
No repository security policy was found, reducing guidance for reporting vulnerabilities, although this alone does not indicate unsafe maintenance.
Both workflows were fully analyzed with no injection sinks or audit findings, and neither uses broad top-level write permissions. However, all seven action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 deniyuda348 |
| udan11 |
| smiley |
| mateuszanella |
| Contributors |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.