xver/php-app-core
Tests, release notes, licensing, and a usable readme support practical adoption. Workflow pinning and the missing security policy leave modest maintenance hygiene gaps.
72%
Total Score
50
100
100
50
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the single-contributor concentration is a meaningful continuity concern rather than an expected organizational publishing pattern.
One contributor made all recent commits, concentrating maintenance capacity in a single person. The active release history partly offsets this, but does not remove the continuity risk.
Only one commit was recorded in the last 3 months, so the current release cadence is not matched by broad recent commit activity; this modestly raises abandonment risk.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
The workflow audit found no dangerous triggers, untrusted checkouts, script injection, or audit findings, and its permissions are read-only. However, all 3 referenced actions are unpinned, which is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version ^8.1 | — | — |
symfony/translation Version ^8.1 | — | — |
doctrine/collections Version ^2.2 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.