milpa/container
Reflection-autowiring PSR-11 dependency injection container for the Milpa PHP framework: lazy singleton resolution, circular-dependency detection with chain reporting, and safe optional retrieval.
78%
Total Score
healthy
Healthy, with active releases but a one-person maintenance base and weak workflow pinning.
Health Score Breakdown
All 18 recent commits came from one contributor, leaving maintenance dependent on a single active individual. Organization ownership provides some backing but does not remove the concentration concern.
Composer build tooling is present, but no security-scanning tooling was detected; the missing scanner is a modest transparency and maintenance gap.
v0.2.1 is a regular, non-prerelease release with no recent prerelease share, although the 0.x major version indicates the API may still evolve.
All four workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned and three workflows grant top-level write permissions, creating workflow-hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rodrigo Vicente - TeamX Agency |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 milpa/core Version >=0.6.2 <1.0 | — | — |
psr/container Version ^2.0 | — | — |
symfony/dependency-injection Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.