olvlvl/composer-attribute-collector
The repository has tests, a changelog, recent merged work, and dependency security scanning. Its missing security policy and all 16 workflow actions being unpinned leave some maintenance and build-reproducibility gaps.
78%
Total Score
75
100
67
Health Score Breakdown
One contributor made all 15 commits in the last 3 months, giving the project a single-contributor bus factor. The active maintainer mitigates abandonment concerns somewhat, but succession capacity remains limited.
The repository has no security policy. For a Composer plugin that runs as part of dependency installation or autoload generation, this weakens vulnerability-reporting transparency.
All 4 workflows were analyzed successfully with no reported audit findings or untrusted checkout and script-injection paths. However, all 16 action references are unpinned, which weakens build reproducibility and supply-chain controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Olivier Laviale |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/class-map-generator Version ^1.4 | — | — |
Weekly Downloads
Info
- Last Published
- 29 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.