tales-from-a-dev/tailwind-merge-php
The README and release notes make integration and version changes easy to follow. Two contributors remain active, though 90% of recent commits come from one person; pin this pre-1.0 release if API stability matters.
82%
Total Score
88
100
88
83
Health Score Breakdown
Two contributors were active, but one made 90% of the recent commits. Organization backing provides some handoff capacity, yet the current contribution pattern remains concentrated.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.
Version 0.4.0 is not a stable major release, so API compatibility may still change, although it is not marked as a prerelease.
The single workflow was fully analyzed with no reported audit findings or untrusted triggers, but all three action references are unpinned, weakening build reproducibility and action-supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sandro Gehri |
| Romain Monteil |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/simple-cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.