Package Health/yousha/php-security-linter

yousha/php-security-linter

Tests, a changelog, clear licensing, and security tooling make the project transparent and maintainable. Review its one-person maintenance base and unpinned workflow actions before relying on it for security checks.

Latest 3.1.8.6

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so the single-contributor activity represents genuine concentration rather than an organization-backed handoff model.

Repo bus factor

One contributor made all three recent commits, giving the project a single-person bus factor. The recent release cadence partly offsets abandonment concern but does not remove succession risk.

Repo commit activity

There were three commits in the last three months, showing recent work, although all activity came from one active maintainer.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a security-focused tool.

Workflow audit

The only workflow is fully analyzed, uses read-only permissions, and has no audited findings or untrusted-code sinks. However, all three action references are unpinned, weakening build reproducibility and supply-chain integrity.