phar-io/manifest
The repository has useful build and static-analysis tooling, clear documentation, and release notes. Workflow actions are unpinned and no security policy is published, so maintenance hygiene is not flawless.
78%
Total Score
75
94
50
Health Score Breakdown
The package has 9 releases since March 2017, but none in the last 12 months and the latest registry release is from March 2024. This indicates a slow release cadence, though the long history supports maturity.
There were no commits or active maintainers in the last 3 months. That is a meaningful maintenance warning, although the repository is not archived and has recent release documentation.
No security policy is published. This is a transparency gap for reporting vulnerabilities, but it is not by itself evidence of abandonment or unsafe code.
The sole workflow was fully analyzed with no high-confidence findings or untrusted-trigger sinks, but all 5 action references are unpinned. That leaves avoidable build-supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Arne Blankerts |
| Sebastian Heuer |
| Sebastian Bergmann |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phar-io/version Version ^3.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.