orklah/psalm-strict-visibility
It is clearly licensed, tested, and has a small dependency footprint. The repository matches the package and uses Composer and Psalm, but all workflow actions are unpinned.
58%
Total Score
50
100
93
75
Health Score Breakdown
Registry publishing is controlled by one user account, and the repository is also user-owned. This is a thin maintainer base, though it is not itself evidence of abandonment.
The package has only 5 releases and its latest release was in September 2021, with no releases in the last 12 months. This is a meaningful maintenance concern for a dependency, despite the stable version history.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the long gap since the latest release. The project is not archived, but current maintenance capacity is not evident.
All 4 workflows were analyzed with no dangerous triggers, sinks, or audit findings, but all 14 action references are unpinned. That leaves avoidable build-integrity risk in the project's automation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 orklah |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.