Phinx integration for thinkphp
58%
Total Score
50
50
83
63
Ten runtime dependencies, including bundled migration and framework integrations, create a relatively broad dependency surface for a database migration package.
A post-install-cmd script runs during installation, adding operational complexity and a possible source of unexpected install behavior.
Only one registry account has publishing access. The repository is user-owned rather than organization-owned, so there is no provided project-backing evidence to offset the thin publishing base.
The repository is owned by the matching individual user account NHZEX, with no organization backing shown. This gives no additional maintenance-capacity evidence.
The package has 26 releases since December 2019, but none in the last 12 months, indicating a meaningful slowdown in publishing activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 || ^2.0 | — | — |
symfony/config Version ^5.4|^6.0 | — | — |
robmorgan/phinx Version ~0.14 | — | — |
symfony/console Version ^5.4|^6.0 | — | — |
zxin/phinx-schema Version ^1.0.2|^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.