Package Health

wexample/php-pseudocode

Healthy and suitable to depend on, with a small maintenance-risk caveat. It has frequent stable releases, active recent commits, a matching repository, documentation, and tests; however, all recent repository work comes from one contributor and no security policy or scanning is present.

Latest 2.1.4PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo bus factorcaution

All 10 commits in the last three months came from one contributor, leaving no demonstrated backup maintainer in recent activity. Organization ownership provides some handoff capacity, but the absence of a second active contributor remains a maintenance risk.

Repo popularitycaution

The repository has zero stars and forks and one watcher, so there is little independent community evidence or visible adoption. Popularity is supporting evidence rather than a verdict, and the active release and commit history compensate for much of this gap.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning automation lowers transparency around dependency and code-security checks, though it is not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy. This makes vulnerability-reporting and response expectations less transparent for dependents.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Wexample

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version ^7.0
nikic/php-parser
Version ^5.0
wexample/php-helpers
Version >=4.0.0

Weekly Downloads

Info

Last Published
1 day ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform