phlak/dev-tools
It includes a README, tests, and an MIT license declaration, with no install-time scripts. The small source project has no security policy, and all four workflow actions are unpinned, adding maintenance and build-integrity concerns.
42%
Total Score
0
63
75
Health Score Breakdown
The latest release was published in March 2022, and there have been no releases in the last 12 months despite the package being over four years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, matching the long release gap rather than showing ongoing maintenance.
The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Version 0.3.0 is not a stable major release, which limits maturity, although it is not marked as a prerelease.
The single workflow was fully analyzed with no reported dangerous findings, and it has no untrusted checkout or injection issues. However, all four action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Chris Kankiewicz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psy/psysh Version >=0.11.0 | — | — |
phpstan/phpstan Version >=1.0 | — | — |
phpunit/phpunit Version >=9.0 | — | — |
symfony/console Version >=5.0 | — | — |
phlak/coding-standards Version >=2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.