juliangut/phpstan-config
Clear documentation, tests, and release notes make integration straightforward. Maintenance is active but concentrated in one contributor, while all workflow actions are unpinned and no security policy is provided.
72%
Total Score
67
50
94
75
Health Score Breakdown
The package declares a substantial set of runtime analysis-rule dependencies, which is appropriate for a PHPStan configuration but increases dependency surface.
The package and repository are owned by the same individual account. This confirms source alignment, but provides no organizational handoff capacity.
The package has six releases over about three years, with one release in the last 12 months; the latest release is recent, but the overall cadence is modest.
All four recent commits came from one contributor, so maintenance depends heavily on a single person.
No repository security policy was found. This is a transparency gap, though the package is a configuration and static-analysis extension rather than a service handling user data.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Julián Gutiérrez |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpstan/phpstan Version ^2.1 | — | — |
ergebnis/phpstan-rules Version ^2.12 | — | — |
shipmonk/phpstan-rules Version ^4.2 | — | — |
phpstan/phpstan-phpunit Version ^2.0 | — | — |
symfony/polyfill-mbstring Version ^1.31 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.