dotkernel/api
Healthy and suitable to use. It has a long release history, a recent stable release, active multi-contributor maintenance, tests, documentation, security policy, and repository security tooling; the main caveat is broad runtime dependencies and post-update automation.
88%
Total Score
100
50
100
75
Health Score Breakdown
The package declares 32 runtime dependencies, creating meaningful maintenance and compatibility surface area for a PHP API skeleton, although the dependencies are explicitly declared and largely aligned with its framework-based purpose.
A post-update-cmd Composer lifecycle script runs during dependency updates, adding automation that deserves review before adoption, even though this is not evidence of malicious behavior by itself.
All 5 workflows lack top-level token permissions, and none declares read-only permissions; this is weaker least-privilege hygiene, although no workflow has top-level write permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dotkernel Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.5.0 | — | — |
mezzio/mezzio Version ^3.20.1 | — | — |
dotkernel/dot-cli Version ^3.9.0 | — | — |
mezzio/mezzio-hal Version ^2.10.1 | — | — |
dotkernel/dot-mail Version ^5.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.