seferov/symfony-psalm-plugin
The repository includes tests, documentation, and automated security scanning, but its workflows use an unpinned container image. Prefer the listed replacement package, psalm/plugin-symfony, rather than adopting this release.
22%
Total Score
50
67
50
Health Score Breakdown
Packagist marks the entire package as abandoned and names psalm/plugin-symfony as its replacement. Package-level deprecation is a severe maintenance and adoption risk.
The package has only four releases, with the latest on March 12, 2020 and no releases in the last 12 months. This strongly indicates that the published release line is inactive.
The repository recorded no commits and no active maintainers in the last 3 months. That provides no evidence of ongoing maintenance to offset the stale release history.
The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, although automated scanning through Dependabot and Psalm provides some compensating tooling.
Both workflows were analyzed successfully, but all 8 action references are unpinned and the audit found a high-confidence, high-severity unpinned container image. This weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Farhad Safarov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vimeo/psalm Version ^3.7 | — | — |
symfony/framework-bundle Version ^3.0 || ^4.0 || ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.