jane-php/open-api-runtime
A single contributor made all four commits in the last three months, while the organization provides some handoff capacity. The repository has no security scanning, and its sole workflow uses an unpinned action.
78%
Total Score
67
93
67
Health Score Breakdown
One contributor made 100% of the four recent commits, creating a concentrated maintenance dependency. Organization ownership partly compensates by allowing work to be handed off.
The repository received four commits in the last three months, showing recent activity. The limited volume still leaves maintenance capacity somewhat thin.
Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a modest transparency and maintenance gap.
The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.
The only workflow was fully analyzed with no untrusted checkout, script injection, or high-severity findings, and it has no top-level write permissions. Its one action is unpinned, which is a supply-chain hygiene caution; the pull_request_target trigger is not risky without an untrusted sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joel Wurtz |
| Baptiste Leduc |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-client Version ^7.0 || ^8.0 | — | — |
symfony/options-resolver Version ^7.0 || ^8.0 | — | — |
jane-php/json-schema-runtime Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.