kununu/code-tools

Healthy and reasonable to depend on for PHP development tooling. It has frequent stable releases, clear documentation, organization backing, tests, and active repository maintenance, though recent commits come from one contributor and installation lifecycle scripts plus no security policy warrant routine review.

Latest v5.1.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 19 runtime dependencies, including several large analysis and tooling frameworks, making its dependency surface relatively broad for a development-tools package.

Lifecycle scripts

Post-install and post-update Composer scripts run during dependency operations. The README documents using --no-plugins to avoid unwanted generated files, but consumers should review this behavior before installation.

Repo bus factor

One contributor made all commits in the last 3 months, creating a narrow recent contributor base. This is partly offset by the repository being owned by the kununu organization.

Repo commit activity

Only one commit was recorded in the last 3 months, so direct maintenance activity is limited despite the recent releases and pull-request merges.

Repo popularity

The repository has zero stars, one fork, and three watchers. This is limited adoption evidence, but popularity is supporting information and does not outweigh the package's release and maintenance signals.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Team Rosa Mota

Direct Dependencies

Dependency	Last Release	Score
phpat/phpat Version ^0.11.4	—	—
vimeo/psalm Version ^6.17	—	—
symfony/yaml Version ^6.4 \|\| ^7.4	—	—
rector/rector Version ^2.6	—	—
phpstan/phpstan Version ^2.2	—	—