tomasvotruba/phpstan-bodyscan
The repository includes tests, a matching README, and a clear MIT license. Workflow checks found no dangerous patterns, but the small maintainer base and missing security policy leave less room for continuity and disclosure.
68%
Total Score
50
88
67
Health Score Breakdown
The package has 22 releases over about two years, but only one release in the last 12 months; the latest release was about four months ago. This indicates slower ongoing delivery rather than abandonment.
One contributor made 100% of the last three months' commits. Because the repository is user-owned rather than organization-backed, this leaves a meaningful continuity risk.
Only two commits were made in the last three months, all by one active maintainer. Recent activity exists, but the pace is modest and concentrated.
Composer build tooling is present, but no security scanning tool was detected. That is a transparency and maintenance gap, not evidence of a security incident.
The repository has no security policy, so the process for reporting and coordinating vulnerability fixes is unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/neon Version ^3.4 | — | — |
symfony/console Version ^6.4 | — | — |
symfony/process Version ^7.4 | — | — |
webmozart/assert Version ^1.12 | — | — |
illuminate/container Version ^11.51 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.