Package Health

ez-php/metrics

Tests, a changelog, and Composer security scanning provide useful maintenance evidence. Workflow references are not pinned, and the project has limited independent contributor coverage despite organizational ownership.

Latest 2.5.4PackagistPackagist

73%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Repo bus factorcaution

One contributor made 100% of the 69 recent commits. Organizational ownership provides some handoff capacity, but independent contributor coverage remains thin.

Repo commit activitycaution

The repository recorded 69 commits in three months, demonstrating strong recent activity, although all commits came from one active maintainer.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow is fully analyzable and uses job-level permissions, with no dangerous audit findings, but all 8 action references are unpinned, weakening build reproducibility and update control.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andreas Uretschnig

Direct Dependencies

DependencyLast ReleaseScore
ez-php/http
Version ^2.0
—
—
ez-php/contracts
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
7 days ago
Created
6 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform