yCodeTech's custom PHP_CodeSniffer standard with opinionated coding rules and best practices
68%
Total Score
83
100
94
75
The repository recorded 0 commits and 0 active maintainers over the past three months, which weakens evidence of ongoing maintenance. The recent 1.2.0 release partly offsets this, but does not establish sustained activity.
Composer build tooling is present, supporting reproducible project setup, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe defect.
The repository has no security policy, so it provides no documented process for reporting or handling vulnerabilities. For a developer tool, this is a modest governance gap.
The single workflow was fully analyzed with no reported audit findings or untrusted checkout paths, but all 6 of its action references are unpinned. This leaves the build exposed to changes in referenced actions over time.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
squizlabs/php_codesniffer Version ^3.13||^4.0@dev | — | — |
dealerdirect/phpcodesniffer-composer-installer Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.