The phplrt library to display parsing errors
72%
Total Score
83
100
50
All 22 recent commits came from one contributor, giving the project a very concentrated maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.
Both workflows were fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, which weakens build reproducibility, while the absence of top-level permissions is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phplrt/source Version ^4.0 | — | — |
phplrt/position Version ^4.0 | — | — |
phplrt/lexer-contracts Version ^4.0 | — | — |
phplrt/parser-contracts Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.