contributte/phpstan
The package is small and has clear ownership, tests, release notes, and a security policy. Maintenance is intermittent, and workflow dependencies are not pinned, leaving avoidable reliability and supply-chain hygiene concerns.
67%
Total Score
75
79
100
Health Score Breakdown
The package has only 4 releases over about 3 years, with a median interval of about 13.5 months; 2 releases in the last 12 months provide some continuing activity but indicate a slow cadence.
There were no commits and no active maintainers in the last 3 months, which is a meaningful sign of currently sparse maintenance capacity.
The repository uses Composer and Make, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.
This release is not a prerelease, but the package remains below a stable major version, so its API maturity is less established.
Both workflows were fully analyzed with no reported audit findings or unsafe triggers, but all 5 action references are unpinned, leaving builds exposed to dependency drift.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Milan Felix Šulc |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpstan/phpstan Version ^2.0.1 | — | — |
phpstan/phpstan-nette Version ^2.0.0 | — | — |
phpstan/phpstan-strict-rules Version ^2.0.0 | — | — |
phpstan/phpstan-deprecation-rules Version ^2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.