dominikb/composer-license-checker
The package has clear usage documentation, tests in its repository, a changelog, and an exact MIT license. Its small project footprint and limited security tooling leave less evidence of ongoing maintenance and release hygiene.
68%
Total Score
50
88
75
Health Score Breakdown
The package has existed since 2019 with 15 releases, but only one release appeared in the last 12 months, indicating a slow cadence without proving abandonment.
The repository recorded zero commits and zero active maintainers in the last three months. The recent 3.0.0 release and open pull requests provide some counterevidence, but current maintenance activity is limited.
The repository uses Composer build tooling, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both action references are unpinned, leaving avoidable workflow supply-chain exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dominik Bauernfeind |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/cache Version ^6.0 || ^7.0 || ^8.0 | — | — |
symfony/console Version ^6.0 || ^7.0 || ^8.0 | — | — |
psr/simple-cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
composer/composer Version ^2.7.7 | — | — |
guzzlehttp/guzzle Version ^7.4.5 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.