TURN relay transport for PHP WebRTC, ported to Amp v3 TCP, UDP, and fibers. MadelineProto's PHP 8.2+ fork supports the modular danog/php-rtc stack.
78%
Total Score
healthy
Active commits and a matching, documented repository support this release; unpinned workflow actions and install hooks add modest risk.
The package runs post-install and post-update Composer scripts, creating additional installation-time behavior that developers should account for.
The package is only 44 days old but has 26 releases, including a latest release two days before collection; this shows active publishing, though the very short history limits maturity evidence.
Two contributors are active, but the leading contributor made about 68% of recent commits, leaving some concentration risk despite the second contributor's substantial activity.
The single workflow was fully audited, uses read-only permissions, and has no unsafe-trigger or injection findings; however, both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0.2 | — | — |
amphp/amp Version ^3.1.3 | — | — |
amphp/socket Version ^2.4.1 | — | — |
danog/php-rtc-stun Version ^2.0.17 | — | — |
danog/php-rtc-mixin Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.