hihaho/phpstan-rules
This release appears healthy and suitable for dependency use: it has a stable major version, substantial recent release activity, an active and unarchived organization-backed repository, comprehensive documentation and source scaffolding, matching repository identity, and clean workflow-risk checks. The main reservations are that most recent commits come from one of two contributors, the repository lacks a security policy, one workflow lacks top-level permissions and another grants write access, and install/update lifecycle scripts increase operational complexity. These concerns warrant review of the automation and maintenance model but do not outweigh the strong evidence of ongoing maintenance and project transparency.
88%
Total Score
90
100
94
70
Health Score Breakdown
post-install-cmd and post-update-cmd scripts add install-time execution and therefore require trust in the publisher's automation, although this is a caution rather than a severe health finding without evidence of unsafe behavior.
Two contributors are active, but the top contributor authored about 86% of recent commits. This concentration is a maintenance caution, partially mitigated by the organization-owned repository and the second contributor's continued activity.
Seven stars and one fork indicate limited adoption, but popularity is supporting evidence only and does not outweigh the strong maintenance signals.
No repository security policy was found, which is a transparency and vulnerability-reporting gap; the active repository and Dependabot provide some compensating security hygiene but do not replace a policy.
Two workflows use read-only permissions, but one lacks top-level permissions and another declares top-level write access. This is a workflow-hardening gap, though dangerous-workflow analysis found no direct exploit pattern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 hihaho |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^12.0||^13.0 | — | — |
phpstan/phpstan Version ^2.1.8 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
illuminate/database Version ^12.0||^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.