nativephp/mobile

NativePHP for Mobile

Latest 4.6.0

Packagist

82%

Total Score

healthy

Healthy, with active maintenance and frequent releases outweighing workflow-pinning gaps.

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump lifecycle script runs during installation, adding execution-time supply-chain exposure, though this is a single named script in a package with substantial visible source and active maintenance.

Repo tooling

Composer is used as a build tool, but no security-scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Version stability

The release is marked stable rather than prerelease, and only 5% of recent releases are prereleases. The reported latest version, 3.3.9, conflicts with the assessed 4.6.0 and reduces metadata consistency.

Workflow audit

All three workflows were analyzed successfully with no untrusted checkouts, script injections, or auditor findings, but all 17 action references are unpinned and one workflow grants top-level write permissions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Simon Hamp

Shane Rosenthal

Direct Dependencies

Dependency	Last Release	Score
react/datagram Version ^1.10	—	—
endroid/qr-code Version ^6.0.9	—	—
laravel/prompts Version ^0.1.1\|^0.2\|^0.3	—	—
symfony/process Version ^6.2\|^7.0\|^8.0	—	—
guzzlehttp/guzzle Version ^7.9 \|\| ^8.0	—	—