phpbb/webpushnotifications
The package includes tests in its repository, release notes, and a clear license. Its workflow audit found no dangerous patterns, but the missing security policy and one unpinned action reduce transparency.
68%
Total Score
83
94
75
Health Score Breakdown
All 14 counted commits came from one contributor, leaving maintenance highly concentrated. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The project uses Composer and Phing build tooling, but no security scanning tools were detected, leaving automated security coverage unclear.
The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkout paths. However, its only action reference is unpinned, which is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marc Alexander |
| Ruslan Uzdenov |
| Matt Friedman |
| Vinny |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ~1.0 | — | — |
minishlink/web-push Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.