orrison/meliorstan
Healthy and reasonable to depend on. Frequent releases, a substantial documented package, active pull-request merging, and clear repository ownership outweigh the lack of recent direct commits and incomplete workflow permission declarations.
82%
Total Score
75
100
100
90
Health Score Breakdown
A single registry publishing account is a modest concentration of release authority, but the matching personal repository and strong release activity provide compensating evidence of ongoing ownership.
No commits or active maintainers were recorded in the last three months, which is a maintenance concern; however, frequent registry releases and four recently merged pull requests show that this metric does not indicate abandonment by itself.
Neither workflow declares top-level token permissions, leaving permission scope less explicit than preferred, although no workflow was found with explicitly declared write permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kevin Ullyott |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpstan/phpstan Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.