mundschenk-at/php-typography
It includes a license, tests, a changelog, release notes, and security scanning. Install-time scripts and no security policy add modest operational overhead.
62%
Total Score
75
100
50
Health Score Breakdown
post-install-cmd and post-update-cmd scripts run during Composer operations, adding execution and maintenance risk compared with a package without install-time hooks.
All 10 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow is fully analyzed and has no untrusted checkout or script-injection findings, but all 15 action references are unpinned and one archived action was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Peter Putzer |
| Jeffrey D. King |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 masterminds/html5 Version ^2.5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.