Package Health

notocomments/vault-php

It includes tests, clear usage documentation, MIT licensing, and release notes for this version. The missing security policy and unpinned workflow actions add smaller transparency and build-hygiene concerns.

Latest 2.0.0PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has had no release in more than four years despite six releases overall, indicating prolonged abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month, providing no evidence of current maintenance.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a library that integrates with Vault.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous findings, but all three action references are unpinned, leaving avoidable build-supply-chain drift.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marco Rieger
Felix Franke

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/psr7
Version ^2.2
php-http/httplug
Version >=1.1.0

Weekly Downloads

Info

Last Published
4 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform