giorgiosironi/eris

PHP library for property-based testing. Integrates with PHPUnit.

Latest 1.3.0

88%

Total Score

healthy

Long-lived, actively maintained package with strong release transparency; workflow pinning and security-policy gaps keep it below the top tier.

Health Score Breakdown

Security policy

The repository has no SECURITY policy file. That is a transparency gap for reporting vulnerabilities, though the active project and Dependabot provide some compensating security process.

Workflow audit

All 10 analyzed action references are unpinned, which weakens build reproducibility and leaves action updates less controlled. The audit found no untrusted checkout, script injection, or high-severity findings; one workflow also grants top-level write access, but no untrusted trigger was identified.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Version	Published	Vulnerabilities
1.3.0	16 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.2.1	10 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.2.0	30 Sept 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.1.0	31 Mar 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.0.0	7 Dec 2024	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.0.0-rc2	8 Mar 2024	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.0.0-rc1	24 Apr 2023	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.14.1	7 Dec 2024	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.14.0	21 Apr 2023	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
0.13.0	17 Dec 2021	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total