peso/moneyphp-exchange
It has tests, release notes, a stable release, and an MIT license. The organization-backed repository has little recent development evidence and no security scanning, while its four workflow actions are unpinned. Pin this version and monitor for renewed maintenance.
62%
Total Score
75
88
50
Health Score Breakdown
The package has five releases over 464 days, but only one release in the last 12 months. This indicates a modest and possibly slowing release cadence, though the latest release is documented.
The repository recorded zero commits and zero active maintainers in the last three months. Although a release and repository push are present, this is a meaningful warning about current maintenance activity.
Composer build tooling is present, but no security-scanning tool was detected. That reduces transparency around automated security checks without showing abandonment by itself.
The repository has no published security policy, leaving no clear process for reporting and handling vulnerabilities.
The only workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned. This leaves the build exposed to upstream action changes and is a workflow hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Anton Smirnov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 peso/core Version ^1.1 | — | — |
arokettu/date Version ^2.0 | — | — |
moneyphp/money Version ^4.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.