sancherie/my-php-vcr
Record your test suite's HTTP interactions and replay them during future test runs for fast, deterministic, accurate tests.
43%
Total Score
unhealthy
Risky: no releases or commits since February 2023, indicating likely abandonment.
Health Score Breakdown
The package has 45 releases, but none in the last 12 months; its latest registry release was about 3 years and 7 months ago. This is strong evidence that maintenance has stopped.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.
The repository name does not match the package name and its README does not mention the package, so the source linkage is not clearly established. This weakens transparency even though name differences can occur in subpackages.
The linked repository has no security policy. For a package that hooks HTTP behavior and is intended for test suites, this is a transparency and maintenance gap.
The single workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but all seven referenced actions are unpinned, leaving build inputs exposed to unnoticed upstream changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adrian Philipp |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^3.0|^4.0|^5.0 | — | — |
beberlei/assert Version ^3.2.5 | — | — |
symfony/event-dispatcher Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.