prinsfrank/phpstan-doc-code-analyzer
Clear licensing, documentation, and a matching source repository improve transparency. Maintenance has stopped for about one year, the project remains at v0.0.3, and its workflow has medium-confidence credential-sharing and unpinned action concerns.
54%
Total Score
0
83
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The package has only three releases and none in the last 12 months; the latest release was about one year ago, which weakens evidence of ongoing maintenance.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap but not severe on its own.
The latest version is v0.0.3 and is not a stable major release, so the package has limited maturity history despite not being marked prerelease.
The single workflow was fully analyzed with no dangerous triggers or untrusted checkouts, but all one action use is unpinned and the audit found a high-confidence medium-severity secrets-inherit issue.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpstan/phpstan Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.