ez-php/ai
The package is actively released, stable, tested, and backed by an organization with Composer security scanning. Its missing security policy and very small public audience limit transparency, while the workflow audit leaves action versions unpinned.
72%
Total Score
83
100
94
67
Health Score Breakdown
One contributor made 100% of the 77 recent commits, creating a thin individual bus factor. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe abandonment signal.
The repository has no stars, forks, or watchers, so there is little external adoption evidence. Popularity is supporting evidence only, and the active release and commit history compensate for this gap.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in a package that connects to multiple AI providers.
The sole workflow is fully analyzed and scopes permissions at job level, with no untrusted checkout or injection findings. However, all 8 action references are unpinned, leaving the CI supply chain exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andreas Uretschnig |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ez-php/http Version ^2.0 | — | — |
ez-php/contracts Version ^2.0 | — | — |
ez-php/http-client Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.