phpcr/phpcr-utils
The release is clearly licensed, documented, tested in the repository, and backed by a long-lived organization. Its small dependency set and recent release notes help, but the repository shows no commits in three months, lacks a security policy, and uses unpinned workflow images.
68%
Total Score
75
100
94
83
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the November 2025 release and push provide some recent evidence of activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap that is partly offset by the project's established build setup.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
Both workflows were analyzed completely with no untrusted checkout or script-injection findings, but all nine action references are unpinned and three high-confidence findings identify unpinned container images. This weakens CI supply-chain reproducibility without making the release unfit on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Buchmann |
| Daniel Barsotti |
| Nacho Martín |
| Lukas Kahwe Smith |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpcr/phpcr Version ~2.1.0 | — | — |
symfony/console Version ^3.0 || ^4.0 || ^5.0 || ^6.0 || ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.