psx/sandbox
Apache-2.0 licensing, a substantial README, extensive tests, and organization backing improve transparency. The workflow has four unpinned actions and no security policy, so maintenance and build hygiene deserve attention.
64%
Total Score
75
100
79
67
Health Score Breakdown
The package has existed for about 8 years with 13 releases, but only one release in the last 12 months and a median interval of about 155 days indicate a slow cadence. The latest release is recent, which partly offsets the concern.
The repository recorded zero commits and zero active maintainers in the last three months. The same-day release shows recent publishing, but it does not demonstrate ongoing maintenance capacity.
Composer is used for builds, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that executes user-provided PHP code.
v0.8.0 is not a stable major release, so compatibility expectations are weaker, although it is not marked as a prerelease and recent releases contain no prerelease share.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christoph Kappestein |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nikic/php-parser Version ^4.0|^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.