Nix tool for PHP
69%
Total Score
caution
Usable with caveats: one release and a single active contributor limit maturity despite active development.
The package is 179 days old but has only one release, so its release track record is too limited to demonstrate mature maintenance.
All 115 recent commits came from one contributor, leaving maintenance dependent on a single active developer.
Version 0.1.0 is not a stable major release, which signals an early-stage API and higher compatibility risk for dependents.
The sole workflow was fully analyzed with no audit findings and uses no unpinned actions, but it grants top-level write permissions; without an untrusted trigger or checkout, this is only a mild hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^8.0.5 | — | — |
ghostwriter/json Version ^3.0.1 | — | — |
ghostwriter/uuid Version ^1.0.3 | — | — |
nikic/php-parser Version ^5.7.0 | — | — |
ghostwriter/clock Version ^3.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.