Package Health

iodigital-com/php-code-sniffer-standard

Usable with caveats: it has a stable release, clear licensing, tests, release notes, and an active organization-owned repository. However, only two releases arrived in the last year, there were no commits in the last three months, and the project lacks a security policy and automated security scanning.

Latest v29.5.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Release historycaution

The package has seven releases over roughly three years, with two releases in the last 12 months and a median interval of about 126 days. This indicates ongoing but relatively infrequent maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, the absence of recent development activity raises abandonment and maintenance-risk concerns.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a transparency and preventive-maintenance gap, though it is not evidence that the package is unsafe.

Security policycaution

No repository security policy was found. This leaves vulnerability-reporting and response expectations undocumented, which is a meaningful but not decisive project-hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
slevomat/coding-standard
Version ^8.15
—
—
squizlabs/php_codesniffer
Version ^3.13.3 || ^4.0
—
—
phpcompatibility/php-compatibility
Version ^10.0.0@dev
—
—
dealerdirect/phpcodesniffer-composer-installer
Version ^0.7 || ^1.0
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform