Package Health/worksome/phpstan-request-factories

worksome/phpstan-request-factories

The package is clearly identified, MIT-licensed, documented, and backed by an organization with repository tests and a security policy. Its stable release and modest dependency set support adoption, while the limited activity record leaves less maintenance evidence.

Latest v2.2.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump script during installation. This is a supply-chain and installation-behavior consideration, though the signal does not show that the script is harmful.

Release history

The package has six releases since June 2023, with one release in the last 12 months and the latest released in March 2026. This is a modest cadence rather than evidence of abandonment.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the recent release and push provide some counterevidence, the current maintenance record is thin.

Repo issue activity

There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month. This offers limited evidence of active project response.

Workflow audit

All three workflows were analyzed, but all nine action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Owen Voke

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^12.0 \|\| ^13.0	—	—
phpstan/phpstan Version ^2.1	—	—
illuminate/contracts Version ^12.0 \|\| ^13.0	—	—
worksome/request-factories Version ^3.5	—	—