fox91/coding-standard
The repository has tests, a clear MIT license, dependency scanning, and a useful README. No security policy, one maintainer, and weak workflow pinning leave modest transparency and maintenance concerns.
68%
Total Score
50
100
94
67
Health Score Breakdown
The package and repository are owned by the same individual account, so the single registry maintainer reflects a small project rather than an organization-backed publishing setup.
The repository recorded zero commits and zero active maintainers in the last 3 months. Recent registry releases partly compensate for this, but the missing source activity is a real maintenance concern.
The repository has no security policy. For a package that includes security-audit tooling, this is a modest transparency gap.
Version v0.6.0 is not marked prerelease and has no recent prerelease share, but the pre-1.0 major version implies some API-change risk for consumers.
All four action references are unpinned, and one workflow has a high-severity, low-confidence cache-poisoning finding; the audit otherwise analyzed all workflows and found no untrusted checkout or script injection.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrea Falco |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 slevomat/coding-standard Version ^8.28 | — | — |
squizlabs/php_codesniffer Version ^4.0 | — | — |
phpcompatibility/php-compatibility Version ^10.0 | — | — |
dealerdirect/phpcodesniffer-composer-installer Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.