Package Health/decodelabs/phpstan-decodelabs

decodelabs/phpstan-decodelabs

Its focused artifact is clearly licensed and documented, and the organization-backed repository matches the package. A small dependency set and no dangerous workflow findings provide useful support despite the remaining maintenance and workflow hygiene concerns.

Latest v0.7.0

Packagist

67%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 47 releases since 2019, but none in the last 12 months and the latest registry release was about 19 months ago. This indicates slowed release maintenance, although the repository was pushed more recently.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small PHP extension this is a minor repository hygiene gap, not evidence that the release is unsafe.

Security policy

The repository has no security policy. That reduces vulnerability-reporting transparency, though the package is small and other repository metadata is available.

Version stability

Version 0.7.0 is not a stable major version, but it is not marked as a prerelease and recent releases have not been prereleases. This is a modest maturity limitation rather than a severe concern.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 action references are unpinned, leaving avoidable build-integrity risk.