mezuno/php-validator
The stable version, README, and release notes improve transparency, while the small repository has no security scanning or security policy. Those positives do not offset the long maintenance gap and restrictive licensing.
38%
Total Score
50
100
81
75
Health Score Breakdown
The manifest declares a proprietary license and no license file was found. That creates a significant adoption and redistribution constraint for an open-source dependency.
Only one account has registry publishing access. The repository is owned by an individual rather than an organization, so there is little visible publishing redundancy if that maintainer stops supporting the package.
The package has had only 3 releases, with none in the last 12 months; its latest release was in September 2023. This prolonged release gap is a meaningful abandonment concern.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's stalled release history and indicating little current maintenance capacity.
Composer is used as a build tool, which is appropriate, but no security scanning tool is configured. This leaves a transparency and maintenance gap for dependency health.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mezuno |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 adbario/php-dot-notation Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.