smeghead/php-class-diagram
The release includes clear documentation, tests in the repository, release notes, and matching Apache-2.0 licensing. A missing security policy adds a smaller transparency concern.
68%
Total Score
75
100
100
83
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity lowers confidence in ongoing maintenance despite the current release.
There are no open issues and three open pull requests, but no issues or pull requests were created or merged during the last month. This is limited recent activity, though not a severe maintenance warning by itself.
The repository has no security policy. For a small CLI tool this is a transparency gap, but it is less serious than missing source or evidence of abandonment.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or auditor findings. However, all six action references are unpinned, which leaves workflow dependencies exposed to upstream changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 smeghead |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^5.3|^6.0|^7.0 | — | — |
nikic/php-parser Version ^5.2 | — | — |
phpstan/phpdoc-parser Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.