laminas/laminas-composer-autoloading
It includes a clear README, repository tests, release notes, and organization-backed ownership. Reproducibility is weaker because both workflow action references are unpinned.
58%
Total Score
75
93
100
Health Score Breakdown
The package has had no releases in nearly three years, despite 14 releases overall; this is a meaningful maintenance concern, though the repository is not archived.
The repository recorded 0 commits and 0 active maintainers in the last three months, indicating little recent development activity.
Both analyzed workflows have their action references unpinned, weakening build reproducibility. However, there are no untrusted checkouts, script-injection findings, or write-permission workflows.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webmozart/assert Version ^1.10 | — | — |
laminas/laminas-cli Version ^1.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.