shish/phpstan-matchy-string
The package includes a README and tests, has no install-time scripts, and uses Dependabot scanning. Its workflow leaves all nine actions unpinned; the low-confidence cache warnings are hygiene concerns, not evidence of unsafe behavior.
60%
Total Score
50
86
67
Health Score Breakdown
There has been only one release, published about 1 year 4 months ago, with no releases in the last 12 months. This limits evidence of release maturity and ongoing publishing.
One contributor made all commits in the last 3 months. This creates a concentrated maintenance dependency and increases continuity risk.
Only one commit was recorded in the last 3 months, so recent maintenance activity is limited even though the repository was updated recently.
The repository has no security policy. For a small static-analysis extension this is a transparency gap, though it is less severe than missing tests or abandoned source activity.
The assessed version is v0.0.0 and is not a stable major release, which signals an early-stage API and weaker maturity expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Shish |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.