ledc/phinx
The source is a very small 12-file project with no security policy or scanning, leaving limited evidence of mature maintenance practices. Its MIT license and non-deprecated status help, but pin this release rather than adopting it broadly.
38%
Total Score
50
67
50
Health Score Breakdown
The linked project contains only 12 files, including a small source tree and no visible test or release infrastructure. This is limited evidence of project maturity for a database migration plugin.
This package has made only one release, 626 days ago, with no releases in the last 12 months. That provides little evidence of sustained maintenance or release responsiveness.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that development may have stalled.
Composer is used for builds, which is appropriate, but no security scanning tools are configured. The absence of scanning weakens supply-chain transparency without proving a defect.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 david |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 monolog/monolog Version >=2.9 | — | — |
robmorgan/phinx Version >=0.16.5 | — | — |
vlucas/phpdotenv Version >=5.0 | — | — |
workerman/webman-framework Version >=1.5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.