pheromone/phpcs-security-audit
The package has a clear license, repository tests, release notes, and organization backing. Install-time scripts and the lack of a security policy add maintenance and transparency concerns, but the main limitation is the absence of recent development.
43%
Total Score
25
75
50
Health Score Breakdown
The latest registry release was on August 5, 2019, with no releases in the last 12 months; this is a substantial abandonment concern for a security-analysis tool.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, confirming that current development is inactive despite the repository not being archived.
The package runs post-install and post-update scripts, which add installation complexity and execution surface for consumers.
There were no new or closed issues or pull requests in the last month, while 18 issues and 9 pull requests remain open; this supports a lack of ongoing maintenance.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a security-focused tool.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jonathan Marcil |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 squizlabs/php_codesniffer Version >3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.