Package Health

php-static-analysis/attributes

The package has a clear README, comprehensive tests, a focused dependency set, and an MIT license. It is not deprecated or archived, but workflow references are unpinned and no security policy is documented.

Latest 0.5.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has made 25 releases since February 2024, but there have been no releases in the last 12 months; the latest release was 15 months ago, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, which supports concern about current maintenance capacity.

Security policycaution

No repository security policy was found, which is a transparency gap for reporting and handling security issues, though it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or severity-rated findings, but all 3 action references are unpinned, leaving avoidable build-integrity risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Carlos Granados

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform