docuccino/inference-phpstan
The MIT license, clear README, changelog, and no install scripts make adoption straightforward. A single active contributor and no security policy leave some continuity and transparency risk.
79%
Total Score
83
100
88
75
Health Score Breakdown
All 55 recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some capacity for handoff, but no second active contributor is shown.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and defense-in-depth gap, not evidence of unsafe code.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
Version v0.20.3 is not a prerelease, but the package remains below a stable major version. This is a modest maturity caveat, partly offset by the active release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Martin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 docuccino/core Version self.version | — | — |
phpstan/phpstan Version ~2.2.0 || ~2.3.0 | — | — |
nikic/php-parser Version ^5 | — | — |
larastan/larastan Version ^3.10 | — | — |
docuccino/attributes Version self.version | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.