mnfst/manifest-php
It includes a substantial test suite, a clear README, release notes for this version, and organization backing. The workflow audit found no dangerous triggers or findings, but both action references are unpinned and the repository has no security policy or scanning tools.
63%
Total Score
83
100
79
75
Health Score Breakdown
The package is only 1 day old with 2 releases, released about 27 hours apart. That shows active initial development but provides too little history to establish long-term maintenance.
The repository records 0 commits and 0 active maintainers in the last 3 months. Because the package is only 1 day old, this is weak evidence of abandonment, but it leaves maintenance capacity unproven.
Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a package that hooks and retries application HTTP requests, the missing reporting guidance reduces transparency for security-related problems.
v0.2.0 is not a stable major release, so its API and behavior may still change substantially. It is not marked as a prerelease, which provides a small counterpoint.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.1 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 2 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.