vkcom/modulite-phpstan
Clear documentation, extensive tests, an MIT license, and organization backing support adoption. Dependence on an older release with no recent commits or releases leaves maintenance and compatibility risk.
58%
Total Score
67
100
94
75
Health Score Breakdown
The package has had no release in the last 12 months, and its latest release was in November 2023; this is a meaningful maintenance concern despite three total releases.
There were no commits or active maintainers in the last three months, indicating stalled maintenance and increasing the risk of incompatibility or abandonment.
There were no new or closed issues or pull requests in the last month, while five issues and four pull requests remain open; this supports the broader evidence of limited recent activity.
No repository security policy is present. This is a transparency gap, although it is partly offset by the repository's Dependabot configuration.
The single workflow was fully analyzed with no audit findings or untrusted checkout and script-injection paths. Both action references are unpinned, a modest reproducibility and supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^5.4 || ^6.0 | — | — |
phpstan/phpstan Version ^1.8 | — | — |
symfony/polyfill-php80 Version ^v1.27.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.