💎 Nette Dependency Injection Container: Flexible, compiled and full-featured DIC with perfectly usable autowiring and support for all new PHP features.
84%
Total Score
75
100
94
90
All 53 recent commits came from one contributor, creating a real continuity risk. Organization backing provides some handoff capacity, but no second recent contributor is shown to reduce the concentration.
There are open issues and pull requests, but no issues or pull requests were opened or closed in the last month. Recent commit activity and the new release offset this as a modest process-activity concern.
Composer build tooling is present, but no security scanning tools were detected. This is a maintenance and transparency gap, though it is not evidence that the package is unsafe by itself.
All three workflows lack top-level token permission declarations, leaving their default permissions less explicit than desired. No workflow requests top-level write access, which limits the severity of this hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/neon Version ^3.4 | — | — |
nette/utils Version ^4.0.6 | — | — |
nette/schema Version ^1.2.5 | — | — |
nette/robot-loader Version ^4.0 | — | — |
nette/php-generator Version ^4.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.