kiwilan/php-archive
The package is well documented, licensed, and backed by a matching repository with tests and release notes. Recent release and commit activity has stopped, while workflow references are entirely unpinned and one automated merge check has a high-confidence condition warning. Dependabot and Composer tooling provide some maintenance support.
62%
Total Score
75
92
50
Health Score Breakdown
The package has 28 releases since March 2023, but no releases in the last 12 months; that slowdown raises some abandonment concern despite its established history.
The repository recorded no commits and no active maintainers in the last 3 months, indicating currently limited visible development activity.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, though other tooling provides partial compensation.
All 18 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in an automated merge workflow. The pull-request trigger has no untrusted checkout or script injection, limiting the risk but not removing the workflow hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ewilan Rivière |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 smalot/pdfparser Version ^2.4 | — | — |
spatie/temporary-directory Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.