danog/php-rtc-stun
The repository has tests, a changelog, a security policy, and active commits from two contributors. Install scripts and unpinned workflow actions add modest supply-chain hygiene concerns, but the project is not deprecated or archived.
86%
Total Score
83
100
67
Health Score Breakdown
The package runs post-install and post-update scripts, which increase installation-time execution risk compared with a package without lifecycle hooks.
Two contributors are active, but the top contributor made about 66% of recent commits, leaving some concentration risk despite the second contributor's activity.
The single workflow was fully audited with read-only permissions and no dangerous findings, but all 3 action references are unpinned, weakening build reproducibility and update safety.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Amin Yazdanpanah |
| Sana Moniri |
| Quasar Stream Community |
| Daniil Gentili |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0.2 | — | — |
amphp/amp Version ^3.1.3 | — | — |
ramsey/uuid Version ^4.9.3 | — | — |
amphp/socket Version ^2.4.1 | — | — |
danog/php-rtc-mixin Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.