symblaze/mare-scan
It has tests, release notes, a matching repository, and static-analysis tooling. Maintenance has been inactive for over two years, while all three workflow actions are unpinned and no security policy is provided.
55%
Total Score
50
86
67
Health Score Breakdown
There were no commits and no active maintainers in the last three months, consistent with the repository's last push being over two years ago. This is concrete evidence of stalled maintenance.
Only two releases exist, with the latest published over two years ago and no releases in the last 12 months. The exact-version release notes provide some transparency, but the long gap lowers confidence in ongoing maintenance.
The repository has no security policy. For a static-analysis tool, this is a transparency gap, though the available tests and Psalm tooling provide some compensating project hygiene.
Version 0.0.2 is not a stable major release, so its API and behavior may still change. It is not marked as a prerelease, which is a modest compensating signal.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving avoidable dependency-drift risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 imdhemy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^7.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
symblaze/console Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.