nikic/php-parser
Healthy and suitable to depend on. It has a long release history, current stable releases, active work from seven contributors, and a well-matched repository; only modest repository security-hygiene gaps remain.
92%
Total Score
100
100
94
80
Health Score Breakdown
The repository uses Make and Composer for builds, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe risk because other maintenance evidence is strong.
No security policy was found in the repository, leaving vulnerability-reporting expectations less explicit. This is a genuine but limited transparency gap for an actively maintained library.
The single workflow does not declare top-level token permissions. No write permissions were detected, but explicit least-privilege configuration would provide stronger CI security hygiene.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-862723 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. nikic/php-parser is vulnerable to Code Injection in versions 5.6.0 - 5.7.0. | 5.6.0 - 5.7.0 | Medium |
Package versions
Maintainers
 Nikita Popov |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.