hertel/phploc
The repository contains tests, a changelog, active recent commits, and two contributors, providing useful maintenance evidence. Read-only workflow permissions and automated dependency scanning help, though all seven action references are unpinned and no security policy is published.
86%
Total Score
83
100
100
75
Health Score Breakdown
The package and repository are owned by the same individual account, so there is no organization-level handoff capacity. The two active contributors shown by repo activity partly compensate for that limitation.
The repository has no published security policy. This is a transparency gap, though it is partly offset by Dependabot and the project's active maintenance.
The single workflow was fully analyzed, uses read-only permissions, and has no high-confidence audit findings or untrusted execution paths. However, all seven action references are unpinned, leaving avoidable workflow supply-chain exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Bergmann |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sebastian/version Version ^3.0 | — | — |
sebastian/cli-parser Version ^1.0 | — | — |
phpunit/php-file-iterator Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.