Package Health

phpmussel/web

phpMussel upload handler

Latest v3.6.1PackagistPackagist

68%

Total Score

caution

Usable with caveats: all recent commits come from one contributor and all workflow actions are unpinned.

Health Score Breakdown

Release historycaution

The package has existed since June 2020 with 22 releases and a latest release on November 21, 2025. Only one release in the last 12 months suggests a slower cadence, but not abandonment by itself.

Repo bus factorcaution

One contributor made all two commits during the last three months. Organization ownership provides some handoff capacity, but current activity remains concentrated.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent activity but a modest maintenance pace. This is partly offset by the recent release and push.

Repo toolingcaution

Composer is used for builds, but no repository security-scanning tool was detected. This is a transparency and maintenance gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed without audit findings, unsafe-trigger sinks, or top-level write permissions. However, all four action references are unpinned, leaving workflow dependencies exposed to upstream changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
phpmussel/core
Version ^3.5.2
—
—

Weekly Downloads

Info

Last Published
10 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform