lulco/phoenix
Database Migrations for PHP
67%
Total Score
caution
Usable with caveats: no commits in three months and all workflow actions are unpinned.
Health Score Breakdown
The package is mature, with 44 releases since February 2016, but only one release in the last 12 months. The latest release is recent, so this suggests slower maintenance rather than abandonment.
The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push provide some counterevidence, this is a meaningful maintenance slowdown.
Composer is used for the build, but no security scanning tools are reported. This is a modest transparency and supply-chain hygiene gap.
The repository has no published security policy. That makes vulnerability reporting and response expectations less transparent.
All 20 analyzed action references are unpinned, so workflow dependencies can change without a reviewed commit. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, which limits the concern to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^7.0 | — | — |
symfony/console Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.