composer-unused/symbol-parser
Recent release notes, repository tests, and an MIT license provide useful support. Maintenance activity is currently quiet, and all six workflow action references are unpinned.
42%
Total Score
75
88
75
Health Score Breakdown
The package is reported to borrow the identity of composer/class-map-generator, which has far more monthly downloads; despite zero artifact overlap, this creates a serious risk that consumers wanted the established package instead.
The repository recorded zero commits and zero active maintainers in the last three months, which indicates currently quiet maintenance despite the recent package release.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
The audit completed cleanly with no injection findings, but all six action references are unpinned, so workflow dependencies can change without a fixed revision.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andreas Frömer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 || ^2 || ^3 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
symfony/finder Version ^5.3 || ^6.0 || ^7.0 || ^8.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
phpstan/phpdoc-parser Version ^1.25 || ^2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.