fschmtt/keycloak-rest-api-client-php
A security policy is absent, and the workflow actions are not pinned to fixed revisions. The project otherwise shows regular releases, current commits from two contributors, tests, and Dependabot coverage.
86%
Total Score
100
100
94
67
Health Score Breakdown
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a client that handles authentication and administrative API access.
Version 0.43.0 is not a prerelease and recent releases have no prerelease share, although the pre-1.0 major version permits more compatibility change than a stable major release.
All 10 analyzed action references are unpinned, which weakens build reproducibility and increases exposure to upstream action changes. The audit found no injection sinks, dangerous triggers, or high-confidence workflow findings, and missing top-level permissions blocks are acceptable on their own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Frederik Schmitt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lcobucci/jwt Version ^4.1 || ^5.2 | — | — |
guzzlehttp/guzzle Version ^7.3 || ^8.0 | — | — |
symfony/serializer Version ^6.4 || ^7.1 || ^8.0 | — | — |
symfony/property-access Version ^6.4 || ^7.1 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.