zircote/swagger-php
The project has clear documentation, a license, and active release support. Recent work is concentrated in one contributor, and all 27 workflow action references are unpinned, but repository activity and security tooling remain strong.
84%
Total Score
75
100
100
88
Health Score Breakdown
The repository and registry package are owned by the same individual account, so there is no organization-level handoff capacity shown by this signal. This makes the concentrated contributor activity more relevant.
Four contributors were active in the last three months, but one contributor made about 98% of commits. That concentration is a real continuity concern despite the project's active development.
All seven workflows were analyzed successfully with no untrusted checkouts, script injections, or high- or medium-severity findings. However, all 27 action references are unpinned, which weakens build reproducibility and introduces avoidable supply-chain drift.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Robert Allen |
| Bob Fanger |
| Martin Rademacher |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
symfony/yaml Version ^5.4 || ^6.0 || ^7.0 || ^8.0 | — | — |
symfony/finder Version ^5.0 || ^6.0 || ^7.0 || ^8.0 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
nikic/php-parser Version ^4.19 || ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.