Diffy CLI tool.
66%
Total Score
caution
Usable with caveats: active releases are offset by one active contributor and an unpinned, template-sensitive workflow.
One contributor made all 12 commits in the last three months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second recent contributor is shown.
The repository recorded 12 commits in the last three months, showing current activity. However, all recent commits came from one active maintainer, limiting visible redundancy.
There are no open issues and six open pull requests, but no issues or pull requests were merged in the last month. The lack of recent merges is a modest maintenance concern alongside recent commits.
Composer and Box provide build tooling, but no security-scanning tools were detected. The build process is defined, while automated security coverage is not evident.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it is not evidence that the release is unsafe by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
n98/junit-xml Version ^1.1 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
consolidation/robo Version ^5.1.1 | — | — |
diffywebsite/diffy-php Version ^1 | — | — |
cweagans/composer-patches Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.