hughcube/phpunit-vm
It has a clear MIT license, repository tests, and no install-time scripts, supporting routine use. Unpinned workflow actions and no security policy leave maintenance safeguards thin.
57%
Total Score
50
90
75
Health Score Breakdown
The latest release was published in May 2024, with no releases in the following two years and four months; only five releases exist overall. This is a meaningful maintenance concern, though the package is not deprecated or archived.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release pause. The repository remains available, but current maintenance capacity is not evident.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a moderate transparency gap, not evidence of a security incident.
Both analyzed workflows completed without reported audit findings or untrusted-code sinks, but all four action references are unpinned. That leaves the build exposed to moving action revisions and is a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 hugh.li |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpunit/phpunit Version * | — | — |
guzzlehttp/guzzle Version * | — | — |
symfony/psr-http-message-bridge Version * | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.