vatsense/vatsense-php
This is a young but plausibly usable package with clear Apache-2.0 licensing, an organization-backed repository that matches the package, regular releases over its 169-day history, a non-deprecated status, and a substantial repository with tests, changelog, CI, and a security policy. The main concern is that repository commit activity shows zero commits and zero active maintainers in the last 3 months, despite two merged pull requests and a recent release, which creates some uncertainty about ongoing maintenance capacity. Missing security-scanning tooling and unspecified top-level workflow permissions are additional hygiene gaps, but the workflows show no analyzed dangerous patterns. Overall, it is suitable with caution for dependencies where the package's young age and recent maintenance silence are acceptable.
68%
Total Score
83
100
83
90
Health Score Breakdown
The repository records zero commits and zero active maintainers over the last 3 months. Recent releases and two merged pull requests provide some counterevidence, but the lack of observed commit activity is a meaningful maintenance concern.
The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but popularity is not decisive and the package has other positive project evidence.
Composer build tooling is present, but no security-scanning tools were detected; the repository's security policy and workflow analysis partly compensate for this hygiene gap but do not replace scanning.
All three workflows lack top-level permissions declarations. No top-level write permissions were detected, but explicit least-privilege configuration is not demonstrated.
The assessed version is not a prerelease, but the package remains below major version 1, so API stability and maturity are somewhat less established.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1 | — | — |
psr/http-message Version ^1|^2 | — | — |
php-http/discovery Version ^1 | — | — |
psr/http-client-implementation Version ^1 | — | — |
psr/http-factory-implementation Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.