phpolar/serializers
The source repository includes tests, a changelog, a README, and active security tooling, while the package itself has a small runtime dependency set. GitHub Actions use unpinned references, broad permissions, and inherited secrets, so release automation needs care.
62%
Total Score
75
100
93
83
Health Score Breakdown
The package has 8 releases and 3 releases in the last 12 months, but its latest release was about 9 months ago; this suggests modest rather than strong release momentum.
The repository recorded zero commits and zero active maintainers over the last 3 months, a concrete sign of stalled development and increased abandonment risk.
The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.
All 15 analyzed action references are unpinned, and 3 workflows use top-level write permissions; high-confidence inherited-secrets findings also appear, although no untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-contrib/serializer Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.