jfcherng/php-mb-string
The source tree includes tests, a changelog, a README, and a clear MIT license, with no install-time scripts. Its small project has limited security and workflow safeguards.
61%
Total Score
50
100
93
75
Health Score Breakdown
The package has 21 releases since June 2018, but its latest release was in April 2023 and there were no releases in the following three years. This is a meaningful maintenance and abandonment concern.
There were no commits and no active maintainers in the three months measured. Combined with the older latest release, this indicates currently quiet maintenance.
The repository has no security policy. For a small library this is a modest transparency and vulnerability-reporting gap, not evidence that the package is unsafe.
The single workflow was fully analyzed with no dangerous sinks or audit findings, but all six action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jack Cherng |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.