Package Health

hisamu/php-xbase

A simple parser for *.dbf, *.fpt files using PHP

Latest 2.4.0PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Although the February 2026 release is recent, the lack of subsequent activity is a maintenance caution.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month, despite 14 open issues and 3 open pull requests; this suggests limited recent issue responsiveness.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap, though it is not severe by itself.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, but the gap is partly offset by the package's established structure and recent release.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 11 action references are unpinned, so workflow supply-chain reproducibility is weaker.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10175 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
hisamu/php-xbase is vulnerable to Allocation of Resources Without Limits or Throttling in versions 1.3.0 - 2.3.0.
1.3.0 - 2.3.0
Medium

Package versions

Maintainers

Luã de Souza
Erwin Kooi
Alexander Strizhak

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
8 months ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform