orisai/reflection-meta
PHP reflection in more reliable and deterministic way - for declarative engines
64%
Total Score
caution
Usable with caveats: no release in 16 months and no commits in the last 3 months.
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was about 16 months ago. Six releases over roughly three years show some history, but the current gap lowers confidence in active maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance warning, though the repository was pushed recently enough that it does not establish abandonment by itself.
The repository has one star, no forks, and one watcher. Popularity is only supporting evidence, but this very small audience provides little independent validation.
All 25 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit found no untrusted checkout or script-injection sink, so these are hygiene concerns rather than severe supply-chain risks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marek Bartoš |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 orisai/utils Version ^1.0.0 | — | — |
orisai/exceptions Version ^1.0.0 | — | — |
orisai/source-map Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.