guanguans/phpstan-rules
The package has clear documentation, a permissive license, recent release notes, and security scanning. Its small audience, single active contributor, install-time scripts, and workflow hygiene issues leave less maintenance and build-process redundancy.
68%
Total Score
63
100
94
67
Health Score Breakdown
post-install-cmd and post-update-cmd scripts run during Composer operations, adding execution during installation or updates beyond ordinary dependency resolution.
Only one registry account has publish access. That is consistent with the repository being user-owned, but it leaves limited publishing redundancy.
The package and repository are both owned by the user account guanguans, so there is no organizational backing shown to offset the concentrated maintainer base.
All three recent commits came from one contributor, so maintenance depends entirely on a single person without demonstrated recent backup.
The repository has 1 star and no forks or watchers. Popularity is supporting evidence rather than a verdict, but this provides little evidence of broad external adoption.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 guanguans |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpstan/phpstan Version ^2.2 | — | — |
illuminate/support Version ^8.83 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 29 days ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.