publishpress/psr-container
Usable with caveats: this is a stable, licensed, narrowly scoped package backed by an organization with tests, release notes, and a recent repository update. Recent commit activity is currently absent, and the repository does not clearly identify or mention this package, so verify the project before adopting it.
72%
Total Score
83
100
89
80
Health Score Breakdown
The repository recorded no commits and no active maintainers during the last three months. The recent push shown by repository_archived is a compensating availability signal, but the lack of current development evidence remains a maintenance concern.
The repository name does not match the package name and its README does not mention the package, creating uncertainty about the repository-to-package link. Shared organization ownership partly reduces that concern but does not remove it.
Composer is used for builds, but no security-scanning tool is detected, leaving a modest transparency and security-process gap.
The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.
The analyzed workflow has top-level write permissions. Although no dangerous workflow pattern was detected, broader-than-necessary token access increases workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 PHP-FIG |
| PublishPress |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.