soyhuce/phpstan-extension
The project has clear documentation, repository tests, MIT licensing, organizational backing, and Dependabot scanning. Its sparse release cadence and several high-confidence workflow hygiene findings leave meaningful maintenance and build concerns.
61%
Total Score
75
100
93
83
Health Score Breakdown
The package has existed for over four years but has only 10 releases, with one release in the last 12 months and a median interval of about 147 days; this indicates slow maintenance without proving abandonment.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance and raises the risk of slower fixes.
All 11 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script-injection finding, so these are workflow hygiene concerns rather than an independent severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bastien Philippe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^3.0 | — | — |
phpstan/phpstan Version ^2.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.