timacdonald/callable-fake
The package is focused, documented, licensed, and backed by a matching repository with tests and a release for this version. Maintenance has gone quiet since the last release, while the workflow relies on unpinned actions and has no security policy.
64%
Total Score
100
50
94
75
Health Score Breakdown
The package has only two declared runtime dependencies, keeping the dependency surface small, although including PHPUnit as a runtime dependency is less typical for a testing utility.
The package has 10 releases since April 2020, but no releases in the last 12 months; the latest release was about 18 months before collection, indicating slower maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The complete workflow audit found no dangerous triggers, untrusted checkouts, or audit findings, but all 11 action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tim MacDonald |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpunit/phpunit Version ^10.0 || ^11.0 || ^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.