sci3ma/sf4grumphp
Configured GrumPHP with bunch of tools for static code analysis Symfony Framework
18%
Total Score
critical
Unfit to use: the package is abandoned, with no releases or commits for about five years.
Health Score Breakdown
Packagist marks the package abandoned at package scope, which is a direct warning against taking a new dependency on this release.
The latest release was published in April 2021, with no releases in the last 12 months. That indicates roughly five years without published maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating abandonment risk.
The package declares 17 runtime dependencies, including several analysis tools, which creates a broad maintenance and compatibility surface for a project with no recent activity.
The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is not clearly demonstrated.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marcin Harasim |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpmd/phpmd Version ^2.9 | — | — |
phpro/grumphp Version ^1.3 | — | — |
phpstan/phpstan Version ^0.11.2|^0.12.26 | — | — |
symfony/console Version ^4.0|^5.0 | — | — |
sebastian/phpcpd Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.