Applies a patch from a local or remote file to any package that is part of a given composer project. Patches can be defined both on project and on package level. Optional support for patch versioning, sequencing, custom patch applier configuration and composer command for testing/troubleshooting patches.
PHPMIT★ 304 estrellas⑂ 45 forksdesde feb 2016Ver en GitHub ↗
vaimo/composer-patches tiene un índice de salud de 71 sobre 100, lo que lo sitúa en la banda Bueno. Su puntuación más alta es Engineering Quality (84/100) y la más baja, AI Readiness (41/100). Se actualizó por última vez hoy. 2 personas concentran la mayor parte del trabajo reciente.
71
global / 100
Bueno
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
71
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
0/25
Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
3
affected_packages
1
assessed_packages
49
unassessed_packages
5
affected_by_severity
high 1
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos, Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejaron 49 dependencias resueltas con OSV. 5 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido o fuera de la lista de paquetes informada. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Código verificable por tipos — PHP sin configuración de verificación de tipos
55/55
Tamaños de archivo manejables — 0/170 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_language
PHP
largest_source_bytes
13.259
source_files_sampled
170
oversized_source_files
0
Datos clave
304estrellas de GitHub
36contribuidores
40commits en los últimos 12 meses
0días desde el último push
65versiones publicadas
2factor bus
31issues abiertas
Packagistecosistemas de paquetes
Más detalle
Historial de estrellas y forks 304 ★ / 45 ⇿
304Estrellas
45Forks
65Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 3Menor 28Parche 34
Cada punto abarca 9 días.
OpenSSF Scorecard 4.6 / 10
4.6agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-22 05:49 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 5 paquetes directos y 49 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
Packagist
loophp/phposinfo
1.8.0
directa
Packagist
seld/jsonlint
1.11.0
directa
Packagist
symfony/console
8.0.11
directa
Packagist
vaimo/topological-sort
—
directa
Packagist
vaimo/topological-sort
2.0.1
directa
Packagist
camspiers/json-pretty
1.0.2
indirecta
Packagist
composer-plugin-api
—
indirecta
Packagist
composer/ca-bundle
1.5.11
indirecta
Packagist
composer/class-map-generator
1.7.3
indirecta
Packagist
composer/composer
2.9.8
indirecta
Packagist
composer/metadata-minifier
1.0.0
indirecta
Packagist
composer/pcre
3.3.2
indirecta
Packagist
composer/semver
3.4.4
indirecta
Packagist
composer/spdx-licenses
1.6.0
indirecta
Packagist
composer/xdebug-handler
3.0.5
indirecta
Packagist
justinrainbow/json-schema
6.8.2
indirecta
Packagist
marc-mabe/php-enum
4.7.2
indirecta
Packagist
mustache/mustache
3.2.0
indirecta
Packagist
pdepend/pdepend
2.16.2
indirecta
Packagist
phpcompatibility/php-compatibility
—
indirecta
Packagist
phpcompatibility/php-compatibility
9.3.5
indirecta
Packagist
phpmd/phpmd
2.15.0
indirecta
Packagist
psr/container
2.0.2
indirecta
Packagist
psr/log
3.0.2
indirecta
Packagist
react/promise
3.3.0
indirecta
Packagist
seld/phar-utils
1.2.1
indirecta
Packagist
seld/signal-handler
2.0.2
indirecta
Packagist
squizlabs/php_codesniffer
—
indirecta
Packagist
squizlabs/php_codesniffer
3.13.5
indirecta
Packagist
symfony/config
7.4.10
indirecta
Packagist
symfony/dependency-injection
7.4.10
indirecta
Packagist
symfony/deprecation-contracts
3.7.0
indirecta
Packagist
symfony/filesystem
7.4.11
indirecta
Packagist
symfony/finder
8.0.8
indirecta
Packagist
symfony/polyfill-ctype
1.37.0
indirecta
Packagist
symfony/polyfill-intl-grapheme
1.37.0
indirecta
Packagist
symfony/polyfill-intl-normalizer
1.37.0
indirecta
Packagist
symfony/polyfill-mbstring
1.37.0
indirecta
Packagist
symfony/polyfill-php73
1.37.0
indirecta
Packagist
symfony/polyfill-php80
1.37.0
indirecta
Packagist
symfony/polyfill-php81
1.37.0
indirecta
Packagist
symfony/polyfill-php84
1.37.0
indirecta
Packagist
symfony/process
8.0.11
indirecta
Packagist
symfony/service-contracts
3.7.0
indirecta
Packagist
symfony/string
8.0.11
indirecta
Packagist
symfony/var-exporter
8.0.9
indirecta
Packagist
vaimo/composer-changelogs
2.0.0
indirecta
Packagist
vaimo/composer-patches-local
—
indirecta
Packagist
vaimo/composer-patches-proxy
1.0.0
indirecta
Packagist
vaimo/composer-patches-target1
1.0.0
indirecta
Packagist
vaimo/composer-patches-target2
1.2.0
indirecta
Packagist
vaimo/composer-patches-target3
1.2.3
indirecta
Packagist
vaimo/patches-file-owner
1.0.0
indirecta
Packagist
vaimo/patches-search-owner
1.0.0
indirecta
Avisos de dependencias 1
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 49 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 1 tienen avisos conocidos, de los cuales 0 son directas. 5 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido, o fuera de la lista de paquetes informada.
Paquete
Versión
Relación
Gravedad
Avisos
Corregido en
composer/composer
2.9.8
indirecta
alta
3
2.10.2
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"composer",
"maintenance",
"constraints",
"patching",
"patcher",
"patches",
"applier",
"composer-plugin",
"plugin",
"composer-commands",
"patch-extension",
"composer-packages",
"composer-extension"
],
"is_fork": false,
"size_kb": 1929,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 344951,
"Shell": 31143
},
"pushed_at": "2026-07-22T05:48:39Z",
"created_at": "2016-02-23T10:04:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T13:20:13Z",
"description": " Applies a patch from a local or remote file to any package that is part of a given composer project. Patches can be defined both on project and on package level. Optional support for patch versioning, sequencing, custom patch applier configuration and composer command for testing/troubleshooting patches.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "http://www.vaimo.com",
"name": "Vaimo",
"type": "Organization",
"login": "vaimo",
"company": null,
"location": "Stockholm, Sweden",
"followers": 41,
"avatar_url": "https://avatars.githubusercontent.com/u/1503275?v=4",
"created_at": "2012-03-05T15:30:37Z",
"is_verified": null,
"public_repos": 117,
"account_age_days": 5251
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "5.6.1",
"kind": "patch",
"published_at": "2026-06-12T07:55:43Z"
},
{
"tag": "6.0.2",
"kind": "patch",
"published_at": "2026-06-12T07:56:54Z"
},
{
"tag": "6.0.1",
"kind": "patch",
"published_at": "2026-03-02T08:15:06Z"
},
{
"tag": "6.0.0",
"kind": "major",
"published_at": "2026-02-03T05:55:09Z"
},
{
"tag": "5.6.0",
"kind": "minor",
"published_at": "2026-01-29T13:33:48Z"
},
{
"tag": "5.5.4",
"kind": "patch",
"published_at": "2025-08-01T12:32:37Z"
},
{
"tag": "5.5.3",
"kind": "patch",
"published_at": "2025-07-30T11:05:15Z"
},
{
"tag": "5.5.2",
"kind": "patch",
"published_at": "2025-07-18T11:01:37Z"
},
{
"tag": "5.5.1",
"kind": "patch",
"published_at": "2025-07-14T09:41:39Z"
},
{
"tag": "5.5.0",
"kind": "minor",
"published_at": "2025-07-14T07:48:55Z"
},
{
"tag": "5.4.0",
"kind": "minor",
"published_at": "2025-06-04T12:21:26Z"
},
{
"tag": "5.3.1",
"kind": "patch",
"published_at": "2025-06-03T09:45:21Z"
},
{
"tag": "5.3.0",
"kind": "minor",
"published_at": "2025-06-02T10:34:34Z"
},
{
"tag": "5.2.2",
"kind": "patch",
"published_at": "2025-06-02T05:56:15Z"
},
{
"tag": "5.2.1",
"kind": "patch",
"published_at": "2025-04-17T11:31:51Z"
},
{
"tag": "5.2.0",
"kind": "minor",
"published_at": "2024-04-18T10:15:09Z"
},
{
"tag": "5.1.2",
"kind": "patch",
"published_at": "2023-11-22T15:08:20Z"
},
{
"tag": "5.1.1",
"kind": "patch",
"published_at": "2023-03-09T06:28:31Z"
},
{
"tag": "5.1.0",
"kind": "minor",
"published_at": "2022-07-08T11:09:43Z"
},
{
"tag": "5.0.0",
"kind": "major",
"published_at": "2022-05-13T10:32:35Z"
},
{
"tag": "4.22.4",
"kind": "patch",
"published_at": "2021-02-25T11:26:06Z"
},
{
"tag": "3.53.4",
"kind": "patch",
"published_at": "2021-02-25T11:26:35Z"
},
{
"tag": "4.22.3",
"kind": "patch",
"published_at": "2021-02-24T14:55:22Z"
},
{
"tag": "3.53.3",
"kind": "patch",
"published_at": "2021-02-24T14:57:04Z"
},
{
"tag": "4.22.2",
"kind": "patch",
"published_at": "2021-02-24T01:48:59Z"
},
{
"tag": "3.53.2",
"kind": "patch",
"published_at": "2021-02-24T01:38:10Z"
},
{
"tag": "4.22.1",
"kind": "patch",
"published_at": "2021-02-20T18:43:43Z"
},
{
"tag": "3.53.1",
"kind": "patch",
"published_at": "2021-02-20T18:43:12Z"
},
{
"tag": "4.22.0",
"kind": "minor",
"published_at": "2021-02-20T18:17:46Z"
},
{
"tag": "3.53.0",
"kind": "minor",
"published_at": "2021-02-20T18:17:08Z"
},
{
"tag": "4.21.1",
"kind": "patch",
"published_at": "2021-01-31T21:34:26Z"
},
{
"tag": "3.52.1",
"kind": "patch",
"published_at": "2021-01-31T21:34:00Z"
},
{
"tag": "4.21.0",
"kind": "minor",
"published_at": "2021-02-04T13:02:37Z"
},
{
"tag": "3.52.0",
"kind": "minor",
"published_at": "2021-01-31T12:23:05Z"
},
{
"tag": "4.16.1",
"kind": "patch",
"published_at": "2019-06-19T13:03:07Z"
},
{
"tag": "4.16.0",
"kind": "minor",
"published_at": "2019-04-09T21:36:43Z"
},
{
"tag": "4.15.0",
"kind": "minor",
"published_at": "2019-04-03T11:44:57Z"
},
{
"tag": "4.12.0",
"kind": "minor",
"published_at": "2019-04-01T05:56:04Z"
},
{
"tag": "4.11.0",
"kind": "minor",
"published_at": "2019-03-21T02:27:34Z"
},
{
"tag": "3.42.2",
"kind": "patch",
"published_at": "2019-03-21T02:26:56Z"
},
{
"tag": "4.6.0",
"kind": "minor",
"published_at": "2018-09-18T12:31:31Z"
},
{
"tag": "3.37.0",
"kind": "minor",
"published_at": "2018-09-18T12:31:49Z"
},
{
"tag": "4.5.0",
"kind": "minor",
"published_at": "2018-09-18T11:07:01Z"
},
{
"tag": "3.36.0",
"kind": "minor",
"published_at": "2018-09-18T11:07:21Z"
},
{
"tag": "4.4.3",
"kind": "patch",
"published_at": "2018-09-14T10:00:11Z"
},
{
"tag": "3.35.3",
"kind": "patch",
"published_at": "2018-09-14T10:00:31Z"
},
{
"tag": "4.4.2",
"kind": "patch",
"published_at": "2018-09-11T08:37:31Z"
},
{
"tag": "3.35.2",
"kind": "patch",
"published_at": "2018-09-11T08:37:50Z"
},
{
"tag": "4.4.1",
"kind": "patch",
"published_at": "2018-09-10T21:36:26Z"
},
{
"tag": "3.35.1",
"kind": "patch",
"published_at": "2018-09-10T21:37:02Z"
},
{
"tag": "4.4.0",
"kind": "minor",
"published_at": "2018-09-10T19:05:25Z"
},
{
"tag": "3.35.0",
"kind": "minor",
"published_at": "2018-09-10T19:06:02Z"
},
{
"tag": "4.3.0",
"kind": "minor",
"published_at": "2018-09-02T09:17:16Z"
},
{
"tag": "4.2.0",
"kind": "minor",
"published_at": "2018-08-22T01:37:40Z"
},
{
"tag": "4.1.1",
"kind": "patch",
"published_at": "2018-08-16T12:36:56Z"
},
{
"tag": "4.1.0",
"kind": "minor",
"published_at": "2018-08-16T12:37:37Z"
},
{
"tag": "4.0.0",
"kind": "major",
"published_at": "2018-08-15T20:07:13Z"
},
{
"tag": "3.31.0",
"kind": "minor",
"published_at": "2018-08-15T22:17:43Z"
},
{
"tag": "3.30.0",
"kind": "minor",
"published_at": "2018-08-14T18:36:56Z"
},
{
"tag": "3.29.1",
"kind": "patch",
"published_at": "2018-08-12T11:58:44Z"
},
{
"tag": "3.29.0",
"kind": "minor",
"published_at": "2018-08-12T09:47:30Z"
},
{
"tag": "3.28.1",
"kind": "patch",
"published_at": "2018-08-10T10:38:04Z"
},
{
"tag": "3.27.0",
"kind": "minor",
"published_at": "2018-05-18T10:48:04Z"
},
{
"tag": "3.26.0",
"kind": "minor",
"published_at": "2018-05-16T11:03:44Z"
},
{
"tag": "3.24.1",
"kind": "patch",
"published_at": "2018-03-02T09:25:53Z"
}
],
"recent_commits": [
{
"oid": "ca8c3670a6d04f6c08ef23561ee4de71c86f2f87",
"body": "…d-output\n\nUse stdout only when reusing patch command output",
"is_bot": false,
"headline": "Merge pull request #155 from coding46/fix/separate-stderr-from-comman…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-06-12T06:43:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a349355d805523d4b6479f698a609b975fa9ba1f",
"body": "Previous patch operations store their process output and interpolate that\nresult into later commands.\n\nThis breaks when a command that resolves a reusable value, such as a\npatch binary path, writes diagnostic output to stderr while still\nreturning a valid result on stdout. In that case the mixed out\n[…]\npagate stdout as the reusable operation result.\n\nAdd a scenario test that reproduces this by resolving the patch binary\nthrough a command that writes a warning to stderr and the binary path to\nstdout.",
"is_bot": false,
"headline": "Use stdout only when reusing patch command output",
"author_name": "Göran Bodenschatz",
"author_login": "coding46",
"committed_at": "2026-06-08T12:13:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42b55379e47b80a52fa6e43b66e4f47d6a7f8d61",
"body": "Feature/Composer 2.10 (master)",
"is_bot": false,
"headline": "Merge pull request #153 from vaimo/feature/composer-210-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-06-04T10:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17d8679ee3bfd83c4b19c47650ad368cf582d080",
"body": "…orkflows to check for Composer 2.10. No changes necessary for 2.10 in the application code.",
"is_bot": false,
"headline": "Updated dependency whitelists to include symfony/console 8, updated w…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-06-04T08:53:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2e902264334275ecb8e0299b0a232caf49ea3fd",
"body": "Updated lock file and workflows config with latest Composer versions (master)",
"is_bot": false,
"headline": "Merge pull request #152 from vaimo/chore/composer-update-may-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-05-18T06:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31dabb6b2f5ff9e8b066a5342f7f5e1ebeb3a772",
"body": null,
"is_bot": false,
"headline": "Updated lock file and workflows config with latest Composer versions",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-05-18T05:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21ac4b65854d91d149ab2da7ae0866568aed56cd",
"body": "Chore/update composer (master)",
"is_bot": false,
"headline": "Merge pull request #150 from vaimo/chore/composer-update-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-04-17T09:35:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "464f864f2cc5a37c147a25fbd733b9b9078d1728",
"body": "…rms from security audits. Updated the workflows config to use latest Composer versions since these days the pick is between 2.2 and 2.9 anyway, the versions in between are not relevant to be tested.",
"is_bot": false,
"headline": "Updated lock file with latest Composer version to eliminate false ala…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-04-17T09:13:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a61db92824a6e934ad0a5b9358a164e61881363",
"body": null,
"is_bot": false,
"headline": "Updated changelog files with latest information",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:57:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fbefaec8d272d1e375c39f8ae2cfc094247eb5f",
"body": "Feature/changelogs package update",
"is_bot": false,
"headline": "Merge pull request #147 from vaimo/feature/changelogs-package-update",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-03-02T07:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4088b91d42a8ee29d9f6fa7565de04d94a56205a",
"body": "… anymore",
"is_bot": false,
"headline": "Updated Github workflows config to not drop vaimo/composer-changelogs…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3064834a484c9fccb3d9bbc5d7343fbe2d62d3db",
"body": "…mo/composer-changelogs, which is compatible with PHP 7.1 - 8.5.",
"is_bot": false,
"headline": "Updated the dev requirements to allow installing newer version of vai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:35:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbd8bed2204e6a47672572a3857fca5706d76d12",
"body": "Feature/symfony console 8",
"is_bot": false,
"headline": "Merge pull request #146 from vaimo/feature/symfony-console-8",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-02-03T05:45:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5efa616383256a6699248e789e13933e6df68955",
"body": "…ssues with Composer config.platform.php causing issues when the version is too loose.",
"is_bot": false,
"headline": "Updated Github Workflows to use more specific PHP versions to avoid i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T09:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d761927f2ae943ff11ca1fdcce48abf85322d9d8",
"body": "…nce vaimo/composer-changelogs really needs maintenance for wider range of PHP version support.",
"is_bot": false,
"headline": "Updated changelog.json with version 6.0 info, not able to apply it si…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T08:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58111a8c1691c980fde70217093ecb4da4808f91",
"body": null,
"is_bot": false,
"headline": "Removed PHP 7.0 from workflows, updating documentation",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T07:34:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2001f59d5dfef84f07a36e00208c19093441f2c",
"body": "…s breaking change and will not work on PHP 7.0",
"is_bot": false,
"headline": "Updated Composer command classes with appropriate return type, this i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T07:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dec426ef53b4361d4527cdf5fe882b63080ea225",
"body": "… 3 support in favor of symfony/console 8. Composer 1 we can't anyway guarantee to work anymore and the whatever support there is should still be available in version 5 of the patcher.",
"is_bot": false,
"headline": "Updated composer.json to drop PHP 7.0, Composer 1 and symfony/console…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T06:51:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d007e2a3e5202b6c8a8ebce352b0a90e92e3544",
"body": "Feature/php85",
"is_bot": false,
"headline": "Merge pull request #144 from vaimo/feature/php85",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-02-02T06:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32b208fff8f915366991a39e30c9045c1b8cd927",
"body": "…ce in the first place, removed the verbosity from install command. The PHP 7.0 slowness needs to be looked at later.",
"is_bot": false,
"headline": "Removed the caching from Github workflows since this made no differen…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T13:42:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c39c590eaf005a56dd98e1fd81c57e1b9a44297",
"body": "…ws, we don't need Xdebug etc at the moment",
"is_bot": false,
"headline": "Testing disabling coverage from the PHP images used in Github workflo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T12:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08a029fe74c339b8a1133f4a2281f84851f0c754",
"body": "…shivammathur/setup-php, not sure why we didn't apply this in the first place",
"is_bot": false,
"headline": "Applying cache for Composer in Github workflows based on examples in …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T07:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "776ba2093ea1be4b592955d8890355d1ab1ab819",
"body": "…what's the bottleneck with slow PHP 7.0 test performance (doesn't replicate locally)",
"is_bot": false,
"headline": "In Github workflows increasing verbosity of 'composer update' to see …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T07:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94b55789af3d5513f97393de7d3fc1aae9c24136",
"body": "… by the constraints at this time. Should reduce false alarms from dependabot.",
"is_bot": false,
"headline": "Updated composer.lock to be based on latest possible packages allowed…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T13:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fc9f62640250de91b97c98e244b4efd72d8bc51",
"body": "…oser versions in general a bit",
"is_bot": false,
"headline": "Updated workflows to include checking for PHP 8.5, adjusting the Comp…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T13:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f06b94ab30e1e792dc06c8a5045960c62ca84b62",
"body": "feat: symfony > 7 compat",
"is_bot": false,
"headline": "Merge pull request #139 from KDederichs/feat/sf8_compat",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-01-29T13:26:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d8a1dad04e6cf5c368c09260b43d047f3b76a74",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/master' into feat/sf8_compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T12:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22890ab51a487e96ede37de3a2a24573de6c7b40",
"body": "…ny/console, added new PHPCS whitelist for symfony/console 7 for the dependency checker",
"is_bot": false,
"headline": "Updated testsuite to ignore some deprecation notices related to symfo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T12:22:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d469dc8fa4e8aff86a5acfacde70f7653f1763f0",
"body": null,
"is_bot": false,
"headline": "feat: symfony add compat for Symfony 3, 4, 5 and 7",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T12:02:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b6907a05d1c233dd064d0dde77ab9cf1aa51b10",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/master' into feat/sf8_compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T11:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9e345177de2348683c4ddc57129e5d01286b1b0",
"body": "…oser-1\n\nDropping Composer 1 from Github workflows setup",
"is_bot": false,
"headline": "Merge pull request #142 from vaimo/feature/github-workflows-drop-comp…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-01-29T05:54:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "121a22ef78baed100a60f13b87b8ed9066d6fd42",
"body": "…n working for a while. Composer 1 support otherwise not touched, we just won't be able to confirm if any future changes still actually work with it. Replaced also Composer 2.8 usage with 2.9, but didn't touch the <2.8 versions for now to have wider test coverage for different versions.",
"is_bot": false,
"headline": "Updated Github workflows to not use Composer 1, since this hasn't bee…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-28T11:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "210f39c86f597c2b29d9a06feb49fe94c35bcabb",
"body": null,
"is_bot": false,
"headline": "feat: symfony > 7 compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2025-12-13T15:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa96411d2ebe60ea4431a8f3cba414e37b47908c",
"body": "Feature/topological sort update",
"is_bot": false,
"headline": "Merge pull request #135 from vaimo/feature/topological-sort-update",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-08-01T12:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef13502de186199f2ad35b4d5fe6ee6c684c52ee",
"body": "…o functional change but output checks included the version of the package",
"is_bot": false,
"headline": "Adjusted tests to work with the new vaimo/topological-sort version, n…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-08-01T12:03:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2b1c08dce65305d3b4f3da21ba3ab8b44c3e15d",
"body": "….0.0 of the package as well. This should have latest changes from its parent repo but also still support same PHP versions as this package. The package should also come with updated autoload config that better works with dependency checks happening in this package.",
"is_bot": false,
"headline": "Updated dependency to vaimo/topological-sort to allow using version 2…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-08-01T11:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3681f46b4bf6170236124fadb09866fa17a67b7",
"body": null,
"is_bot": false,
"headline": "License file update",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-31T05:14:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b77233d251a2534a0f3eaa52d7670a40a00abe86",
"body": null,
"is_bot": false,
"headline": "Updated changelog and development docs",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-31T05:10:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ed64d242258f1757e88cb9dad3d175e983461d5",
"body": "…sion-checks\n\nFix/Invalid Composer version checks",
"is_bot": false,
"headline": "Merge pull request #134 from vaimo/fix/issue-122-invalid-composer-ver…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-30T11:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113cf6368bd8a64a1fdc242fd45b8d1c5bab97d9",
"body": "…RSION constant as the static method seems to return much more usable version number for comparison purposes, while VERSION may not contain version number at all in preview builds",
"is_bot": false,
"headline": "Updated Composer version checks to use getVersion() instead of the VE…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-30T10:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "506a088413ccb7bdd9b91be468929a25052e0200",
"body": "…ased on composer.json",
"is_bot": false,
"headline": "Updating changelog files, ensuring that composer.lock is up to date b…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-18T10:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "724be3acedf5e55ce0b2be17c256c12ba89681a3",
"body": "…-during-package-reset\n\nFix incorrect handling of promises during package reset",
"is_bot": false,
"headline": "Merge pull request #124 from vaimo/fix/incorrect-handling-of-promises…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-18T10:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa8cef59c5ca663cade809d8f2661e64863763ee",
"body": "…ing-of-promises-during-package-reset",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/incorrect-handl…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T10:25:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "311cf7d8b204fd4fddf6d3540d027a9cb46e5274",
"body": "Fix/issue 132 phposinfo compatibility",
"is_bot": false,
"headline": "Merge pull request #133 from vaimo/fix/issue-132-phposinfo-compatibility",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T09:36:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1faf5a7174ba5c56269eee7f4e4bac61cec05e7",
"body": null,
"is_bot": false,
"headline": "Ignored warning from phpcs related to the class aliases",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T09:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15b62b61f806fbdc21c32199c4d306a88e0d1ed8",
"body": "… back to src/Config/Context.php. The autoloader approach is not valid in Composer plugin context where the workaround is required already when installing the module, as autoloader configs apply only after the packages are installed. Relates to issue https://github.com/vaimo/composer-patches/issues/132",
"is_bot": false,
"headline": "Replaced the compatibility.php workaround by adding the class aliases…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T09:10:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dd06f1d5336e1f25740b1de3ae9528a2949986d",
"body": "Feature/pr 129 tests",
"is_bot": false,
"headline": "Merge pull request #131 from vaimo/feature/pr-129-tests",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T07:47:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f85da01741e795045ab803cba97905e9e67f11c",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/pr-129-tests",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T07:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d74b20b30f916f1f34744bc873b3fef53c9630e",
"body": "Add negated dependency support",
"is_bot": false,
"headline": "Merge pull request #129 from adamj88/depends-exclusion",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T07:28:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b05f05fb257e6cb08d18de1e5f1e524a47076039",
"body": "…ll/129, adjusting other tests",
"is_bot": false,
"headline": "Preparing test cases for https://github.com/vaimo/composer-patches/pu…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-06T12:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8edab0256633432985f522e59707d9baff13264c",
"body": null,
"is_bot": false,
"headline": "Add negated dependency support",
"author_name": "Adam Johnson",
"author_login": "adamj88",
"committed_at": "2025-06-05T15:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b54c9fdf474dd4b73f9601e7d6f4bc16c3c5526a",
"body": null,
"is_bot": false,
"headline": "Fixed loose formatting issue in the changes",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:26:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c08af5b8c33a0f9fdef9a104163d34de3550fd2",
"body": "…ing-of-promises-during-package-reset",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/incorrect-handl…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98d94b30fde364fe4f55e797e7ccd5543e205744",
"body": null,
"is_bot": false,
"headline": "Updated changelog.json with 5.4.0 release notes",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b4ba350a9bfe41d07261a38006667e595dba4f",
"body": "Feature/package maintenance",
"is_bot": false,
"headline": "Merge pull request #125 from vaimo/feature/package-maintenance",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-04T11:54:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ef29be7408a434e8daa68dc0775d4a19e55222a",
"body": "…sable, it does help reducing costs. Also updated missing releases from changelog.json.",
"is_bot": false,
"headline": "Added back fail fast strategy since although this can be useful to di…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T11:05:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47bd2cbdb31eb98668461cb7b9f14f5b6ffd9be",
"body": "…0 in composer.json as platform seems to give you older Symfony version which causes inconsistent outputs in Composer 1",
"is_bot": false,
"headline": "Updated workflow with specific PHP 7.0 version, since setting just 7.…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T10:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "632bf79e13a60521c378a58f297c351bc673f9bb",
"body": "…from https://github.com/vaimo/composer-patches/pull/127 are pretty simple to include. Included also PHP 7.0 support back, since the PHP 8.4 compatibility changes from https://github.com/vaimo/composer-patches/pull/121 were possible to achieve another way. Updated Github workflow to include more PHP\n[…]\n earlier. Updated dependency whitelists based on the older versions, looks like symfony/console has lots of incompatibilities that have been suppressed with function_exists and autoloader workarounds.",
"is_bot": false,
"headline": "Bringing back compatibility with past PHP versions since the changes …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T10:02:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "66353aea7d0a89d85a1180f2eb30240e76e37cc0",
"body": "…ntenance",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/package-mai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T09:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55eb5a5347a20ef6bf662204f1f4bd8b22ca8f89",
"body": "Fix/php backwards compatibility",
"is_bot": false,
"headline": "Merge pull request #127 from vaimo/fix/php-backwards-compatibility",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-03T09:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c39b93e269d7a2de9965bf28ef36e4b5bcb6404",
"body": "…ecame the case already earlier when PHP 8.4 compatibility changes were implemented.",
"is_bot": false,
"headline": "Updated minimum PHP version requirement to 7.1, since this actually b…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T09:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e077f73081cd903c596f2e4b13a608de2d4ce9",
"body": "…sinfo versions 1.6 and 1.7, previously we were locked to 1.7 despite composer.json allowing installing 1.6. Updated also src/Utils/FileSystemUtils.php to use array_merge instead of merging arrays through spread operators, since latter is only supported in PHP 7.4.",
"is_bot": false,
"headline": "Updated src/Config/Context.php with workaround to support loophp/phpo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T08:07:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "384b76eed2dcc5d79c618274ffc4d6c8d4b6accf",
"body": "…sues found by code analysis after merging latest changes to the branch, added alternative solution for https://github.com/vaimo/composer-patches/pull/110 and updated test to check for the solution",
"is_bot": false,
"headline": "Updated bin/test to allow rendering debug outputs in tests, fixing is…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T07:14:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1267a528025f5583c3b304a3c9c1471c859c1b7e",
"body": "…ntenance",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/package-mai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T11:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d41c3cad985b5e192f0f08a6ab955cf7370087e",
"body": "… based on some new changes in master branch",
"is_bot": false,
"headline": "Removing invalid whitespaces in documentation, added also information…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T11:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f674021cdf51727fdc8cc4357afdf7d5fb78af49",
"body": "Allow wildcard in patches search folder path",
"is_bot": false,
"headline": "Merge pull request #86 from indykoning/feature/glob-folder-path",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T10:33:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f7dbe5e2dec065768a7b7f8b483a6f332c9d69c",
"body": null,
"is_bot": false,
"headline": "Moved globbing to FileSystemUtils implementing the GlobIterator",
"author_name": "indykoning",
"author_login": "indykoning",
"committed_at": "2025-06-02T07:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5393df08cc08f42315ae348ab92f75f79e18cd4",
"body": null,
"is_bot": false,
"headline": "Documentation updates in docs/DEVELOPMENT.md",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T07:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf4bf96a6bd74c685758cbf5e9f3eecb6815045",
"body": "…tinued\n\nFeature/lock data type changes continued",
"is_bot": false,
"headline": "Merge pull request #126 from vaimo/feature/lock-data-type-changes-con…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T05:52:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bd598be362f692d426b168c4ff0f4e519e5acc6",
"body": "…ull/123 further by implementing the data type fix from Composer itself in src/Repository/Lock/Sanitizer, which should ensure the data types remain consistent in composer.lock even if the Sanitizer does need to do changes",
"is_bot": false,
"headline": "Refined the solution from https://github.com/vaimo/composer-patches/p…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T05:50:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46927d29cd9f0e2c948fd7495d1e38fc8258cbf8",
"body": "Only rewrite lockfile if the data has changed",
"is_bot": false,
"headline": "Merge pull request #123 from fredden/feature/lock-data-type-changes",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T05:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0697e9bb219dd60c9fd60c6846da7b94b3d90200",
"body": "…ests",
"is_bot": false,
"headline": "Workflow seems to work now, changing trigger to be based on pull requ…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e05a17a7d52abc85d310d12ed3e9907566c39da",
"body": "…the duplicate error. This can affect more relevant errors, but at least the change is specific to the three tests were the error appears in",
"is_bot": false,
"headline": "Instead of depending on specific react/promise version, filtered out …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:37:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88bdec33e98b30f5260a9e9fcb09f8167fb40e73",
"body": "…mpatible with PHP 8.4",
"is_bot": false,
"headline": "Dropping the react/promise dev requirement since 2 is not actually co…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35abfd8bc88197ab41276a2f61a5ba92cfa3dc0f",
"body": "…t, since they started requiring react/promise 3",
"is_bot": false,
"headline": "Updating workflow further to drop the Composer 2.7 versions down a bi…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:14:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01c4c3a3222d772d79e3cc7ee310dafdca4ca5ed",
"body": "…ple 2.8.9 has support for react/promise 2 still",
"is_bot": false,
"headline": "Updating workflow to use latest patch versions for Composer, for exam…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "378a0ba8438d9933409da6153d6acdc31193b24d",
"body": "…poser 2.7, adjusting some of the test scenarios to be more flexible about certain details in the output assertions, added explicit dev requirement for react/promise version 2 since in later Composer versions there's one duplicate error related to unhandled promise rejection which made it hard to make output assertions with",
"is_bot": false,
"headline": "Fixed issue with some of the allow-plugins configs not working in Com…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef1364fe5c35405aa89c0451668efdeb74dc448d",
"body": "…ommit certain errors in Composer that you wouldn't get locally, dropping all .output-v2 files in favour of .output since 8.4 seems to manage to use .output in some cases anyway and we don't currently need differentiating between Composer 1 and 2",
"is_bot": false,
"headline": "Updated workflow configuration with environment variable that should …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T07:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acdeeb58b9ceba975210e1ab82a96aff660f3cfb",
"body": "…st scenario was just affected by incorrect Composer version detection when the test were being run in non-interactive mode",
"is_bot": false,
"headline": "Turns out that the output changes were actually correct, the later te…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T06:29:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5ddc946a5b3c9449e789e87b046d520f29069f6",
"body": "…lines in outputs is not correct way to solve the problem, testing out if dropping the stty calls in bin/test works better since this doesn't seem to work in the workflow",
"is_bot": false,
"headline": "Noticed through a later test scenario output that adding the install …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T12:04:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09b51fd9883a45ace83b19af76249846426f7aca",
"body": null,
"is_bot": false,
"headline": "Adjusting the symfony/console related compatibility whitelist",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:50:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ee628df1ed6ba778b162f2c7e2748ba89d5ef14",
"body": null,
"is_bot": false,
"headline": "Fixed PHP 8 specific issue with patch:validate command",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:38:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b609e36c61009225ecf1802db480346d962900ee",
"body": "… unrecognised",
"is_bot": false,
"headline": "Fixed issue with dependency analysis where empty autoloader paths get…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41ece9f05bd0bf98f27372b5b95c5fa024970655",
"body": "…urrently not compatible with later versions. Adjusting more output expectations in the test scenarios.",
"is_bot": false,
"headline": "Added explicit requirement for symfony/console <7.0, the package is c…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41421a409f92b0c7cf1f73dbdbfd592d2fd631f7",
"body": "…of vaimo/composer-changelogs in workflow since it does not seem to be compatible with newer versions of symfony/console",
"is_bot": false,
"headline": "Adjusting workflow Composer version in PHP 8.2, adding back dropping …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:37:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb9062db9865cae14b09ba6c3621aa98a1f814a",
"body": "…ocally can customise mutagen.yml to include version control files to get matching files. Still uncertain where one installation output line is coming from, but for now prioritising the workflow.",
"is_bot": false,
"headline": "Dropped .git removal, opted for adjusting the test outputs instead. L…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6db110632d40be4e5799b35447657f666140e3ef",
"body": "…clone the code, testing out dropping .git folder manually",
"is_bot": false,
"headline": "Adding back actions/checkout in workflow since of course you need to …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eebe31a972c310f90a3c367ae29e3f215856d57a",
"body": "…more explicitly, since this can mismatch with the runner Composer version. Trying out also dropping actions/checkout since this might be more closer to local execution of tests without git.",
"is_bot": false,
"headline": "Adding step in workflow to specify the dev composer/composer version …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5d960a9c8d3c592f977b759eb289515c02146e0",
"body": "…low since former doesn't actually succeed to change the runner PHP version and latter appears to have support for Composer as well",
"is_bot": false,
"headline": "Switched from php-actions/composer to shivammathur/setup-php in workf…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:16:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d60c7881eda06010fb6d7ed319fb7f780b0c8049",
"body": "…stallations/",
"is_bot": false,
"headline": "Adding allow-plugins configs in all composer.json files under test/in…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:05:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2378ec20fd7a5434182e6e7e4fdcfec1146c744",
"body": "…ince it seems like 8.3 is getting used, updated test script to not use --no-plugins since this doesn't seem to work in Github workflows and it works locally with and without it",
"is_bot": false,
"headline": "Trying out different PHP version definitions in the workflow config s…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68d1ad43eebfd7300b0d4adcb0c3a8aff3e52665",
"body": null,
"is_bot": false,
"headline": "Setting allow-plugins for sandbox composer.json",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7748a5e8649e6b9bcac32c1f6999dc1ded25985",
"body": "…constraints in test sandbox",
"is_bot": false,
"headline": "Reverted code sniffer update in root composer.json, loosening up the …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50192454920623ce306a8f217a11448fcd5d7bf1",
"body": "…ave some PHP compatibility issues",
"is_bot": false,
"headline": "Bumping up code sniffer version dependency a bit since 2.9 seems to h…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T07:09:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "143109f12e797b4a4388904279262ca39193cb3d",
"body": "…he requirement to version with consistent namespace. Does limit using the package to PHP versions 7.4 and above.",
"is_bot": false,
"headline": "Dropped the loophp/phposinfo compatibility workaround and bumped up t…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d809fe8418021986cc8f9d1ee264bf2020f97337",
"body": "…ying out specifying the allowed plugin in dependency analysis script itself",
"is_bot": false,
"headline": "Updating the root composer.json allow-plugins setting didn't work, tr…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:35:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56ecaa6e6d741c2f3f61b7384a655e1b2fcc10f3",
"body": "…not support latest PHP versions anyway, has also some issues with older versions as well",
"is_bot": false,
"headline": "Dropping sebastian/phpcpd since this is currently abandoned and will …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:31:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bbad9f4fd2704f59b9605de29bd2cc0b8854eb1",
"body": null,
"is_bot": false,
"headline": "Flipped the class aliases in loophp/phposinfo compatibility workaround",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4845cfda829730f3648cf590a7f0be1543a46e8b",
"body": "… and 1.7.0, although we could also consider bumping up the version requirement to not need to do this workaround",
"is_bot": false,
"headline": "Added workaround for loopphp/phposinfo namespace change between 1.6.5…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf2ea297eca02612d8bf14c01b5ac83cc4da6e8",
"body": "…s dev dependency and doesn't support PHP <7.4, updated allow-plugins settings",
"is_bot": false,
"headline": "Added dropping of vaimo/composer-changelogs in workflows since this i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:02:02Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 65,
"commits_last_year": 40,
"latest_release_at": "2026-06-12T07:55:43Z",
"latest_release_tag": "5.6.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 8,
"days_since_latest_release": 39,
"mean_days_between_releases": 37
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "vaimo/composer-patches",
"exists": true,
"license": "MIT",
"keywords": [
"plugin",
"utility",
"tools",
"maintenance",
"utils",
"utilities",
"composer plugin",
"patching",
"backports",
"Fixes",
"version restriction",
"indirect restrictions",
"patch description",
"remote patch files",
"downloaded patches",
"package bug-fix",
"package patches",
"patch exclusion",
"development patches",
"hot-fixes",
"hotfixes",
"environment flags",
"skipped packages",
"patch skipping",
"maintenance tools",
"multiple formats",
"patch branching",
"multi-version patches",
"bundled patches",
"patch command",
"os-specific config",
"configurable patch applier",
"back-ports",
"bulk patches",
"patch header",
"patch meta-data",
"resolve patches",
"patch search",
"patch resolve",
"patcher",
"composer command"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/vaimo/composer-patches",
"is_deprecated": false,
"latest_version": "6.0.2",
"repository_url": "https://github.com/vaimo/composer-patches",
"versions_count": 204,
"total_downloads": 4670819,
"dependents_count": 23,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 91770,
"first_published_at": null,
"latest_published_at": "2026-06-12T06:43:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 39
}
]
},
"popularity": {
"forks": 45,
"stars": 304,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2017-08-27",
"count": 1
},
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2019-02-20",
"count": 1
},
{
"date": "2019-03-29",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-06",
"count": 1
},
{
"date": "2019-11-12",
"count": 1
},
{
"date": "2019-11-19",
"count": 1
},
{
"date": "2020-01-29",
"count": 1
},
{
"date": "2020-04-04",
"count": 1
},
{
"date": "2020-04-29",
"count": 1
},
{
"date": "2020-06-16",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2020-12-21",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-02-08",
"count": 1
},
{
"date": "2021-02-24",
"count": 1
},
{
"date": "2021-03-12",
"count": 1
},
{
"date": "2021-05-05",
"count": 1
},
{
"date": "2021-06-07",
"count": 2
},
{
"date": "2021-10-05",
"count": 1
},
{
"date": "2021-12-12",
"count": 1
},
{
"date": "2022-02-24",
"count": 1
},
{
"date": "2022-03-02",
"count": 1
},
{
"date": "2022-03-12",
"count": 1
},
{
"date": "2022-04-12",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2023-02-15",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-03-23",
"count": 1
},
{
"date": "2023-03-26",
"count": 1
},
{
"date": "2023-12-03",
"count": 1
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2025-02-10",
"count": 1
},
{
"date": "2025-02-17",
"count": 1
},
{
"date": "2025-02-26",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-12-13",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
}
],
"complete": true,
"collected": 43,
"total_forks": 45
},
"star_history": {
"days": [
{
"date": "2017-06-01",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-07",
"count": 2
},
{
"date": "2017-07-30",
"count": 1
},
{
"date": "2017-07-31",
"count": 12
},
{
"date": "2017-08-01",
"count": 1
},
{
"date": "2017-08-03",
"count": 1
},
{
"date": "2017-08-04",
"count": 1
},
{
"date": "2017-08-08",
"count": 1
},
{
"date": "2017-08-14",
"count": 1
},
{
"date": "2017-08-23",
"count": 1
},
{
"date": "2017-08-29",
"count": 1
},
{
"date": "2018-01-21",
"count": 1
},
{
"date": "2018-01-29",
"count": 1
},
{
"date": "2018-03-01",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-07",
"count": 3
},
{
"date": "2018-03-15",
"count": 1
},
{
"date": "2018-03-19",
"count": 3
},
{
"date": "2018-03-21",
"count": 2
},
{
"date": "2018-04-07",
"count": 1
},
{
"date": "2018-04-20",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-25",
"count": 1
},
{
"date": "2018-06-19",
"count": 1
},
{
"date": "2018-06-21",
"count": 1
},
{
"date": "2018-06-27",
"count": 1
},
{
"date": "2018-07-11",
"count": 1
},
{
"date": "2018-07-30",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-16",
"count": 1
},
{
"date": "2018-08-24",
"count": 1
},
{
"date": "2018-08-25",
"count": 1
},
{
"date": "2018-08-26",
"count": 1
},
{
"date": "2018-09-04",
"count": 1
},
{
"date": "2018-09-06",
"count": 18
},
{
"date": "2018-09-07",
"count": 2
},
{
"date": "2018-09-10",
"count": 1
},
{
"date": "2018-09-11",
"count": 1
},
{
"date": "2018-09-17",
"count": 1
},
{
"date": "2018-10-19",
"count": 1
},
{
"date": "2018-10-21",
"count": 1
},
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2018-11-12",
"count": 1
},
{
"date": "2018-11-21",
"count": 1
},
{
"date": "2018-12-03",
"count": 2
},
{
"date": "2018-12-06",
"count": 1
},
{
"date": "2019-01-13",
"count": 1
},
{
"date": "2019-01-15",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2019-02-14",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-27",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-04",
"count": 1
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-27",
"count": 1
},
{
"date": "2019-05-03",
"count": 1
},
{
"date": "2019-06-17",
"count": 1
},
{
"date": "2019-06-23",
"count": 1
},
{
"date": "2019-06-24",
"count": 1
},
{
"date": "2019-06-25",
"count": 1
},
{
"date": "2019-07-05",
"count": 2
},
{
"date": "2019-07-25",
"count": 1
},
{
"date": "2019-08-03",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-09-17",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-09-30",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-11-18",
"count": 2
},
{
"date": "2019-11-19",
"count": 2
},
{
"date": "2019-11-20",
"count": 5
},
{
"date": "2019-11-21",
"count": 5
},
{
"date": "2019-11-24",
"count": 1
},
{
"date": "2019-11-25",
"count": 1
},
{
"date": "2019-11-26",
"count": 4
},
{
"date": "2019-11-29",
"count": 2
},
{
"date": "2019-12-06",
"count": 1
},
{
"date": "2019-12-10",
"count": 1
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-18",
"count": 1
},
{
"date": "2019-12-24",
"count": 1
},
{
"date": "2019-12-25",
"count": 1
},
{
"date": "2020-01-01",
"count": 1
},
{
"date": "2020-01-07",
"count": 1
},
{
"date": "2020-01-20",
"count": 1
},
{
"date": "2020-01-21",
"count": 1
},
{
"date": "2020-01-22",
"count": 2
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-02-03",
"count": 2
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-24",
"count": 1
},
{
"date": "2020-02-26",
"count": 1
},
{
"date": "2020-03-12",
"count": 1
},
{
"date": "2020-04-01",
"count": 1
},
{
"date": "2020-04-17",
"count": 1
},
{
"date": "2020-05-26",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-05-30",
"count": 1
},
{
"date": "2020-06-02",
"count": 1
},
{
"date": "2020-06-20",
"count": 1
},
{
"date": "2020-07-20",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-08-13",
"count": 1
},
{
"date": "2020-10-20",
"count": 3
},
{
"date": "2020-10-21",
"count": 2
},
{
"date": "2020-10-23",
"count": 2
},
{
"date": "2020-10-26",
"count": 1
},
{
"date": "2020-11-04",
"count": 1
},
{
"date": "2020-11-11",
"count": 1
},
{
"date": "2020-11-12",
"count": 2
},
{
"date": "2020-11-18",
"count": 2
},
{
"date": "2020-12-07",
"count": 1
},
{
"date": "2020-12-08",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2021-01-14",
"count": 1
},
{
"date": "2021-02-24",
"count": 1
},
{
"date": "2021-02-25",
"count": 1
},
{
"date": "2021-03-02",
"count": 2
},
{
"date": "2021-03-03",
"count": 1
},
{
"date": "2021-03-04",
"count": 2
},
{
"date": "2021-03-11",
"count": 1
},
{
"date": "2021-04-26",
"count": 1
},
{
"date": "2021-04-27",
"count": 1
},
{
"date": "2021-05-25",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-07-01",
"count": 1
},
{
"date": "2021-07-20",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-09-27",
"count": 1
},
{
"date": "2021-10-07",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-17",
"count": 1
},
{
"date": "2021-12-02",
"count": 1
},
{
"date": "2021-12-25",
"count": 1
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-16",
"count": 2
},
{
"date": "2022-02-17",
"count": 2
},
{
"date": "2022-02-18",
"count": 7
},
{
"date": "2022-03-01",
"count": 1
},
{
"date": "2022-03-02",
"count": 7
},
{
"date": "2022-03-08",
"count": 1
},
{
"date": "2022-03-29",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-05-03",
"count": 1
},
{
"date": "2022-05-18",
"count": 1
},
{
"date": "2022-06-02",
"count": 1
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-08-31",
"count": 1
},
{
"date": "2022-09-07",
"count": 1
},
{
"date": "2022-09-28",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-29",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-18",
"count": 1
},
{
"date": "2022-12-15",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-01-14",
"count": 1
},
{
"date": "2023-01-22",
"count": 1
},
{
"date": "2023-01-26",
"count": 1
},
{
"date": "2023-01-27",
"count": 2
},
{
"date": "2023-03-27",
"count": 1
},
{
"date": "2023-04-10",
"count": 1
},
{
"date": "2023-04-27",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-08-11",
"count": 1
},
{
"date": "2023-08-13",
"count": 1
},
{
"date": "2023-08-18",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-09-05",
"count": 1
},
{
"date": "2023-10-11",
"count": 1
},
{
"date": "2023-11-24",
"count": 2
},
{
"date": "2023-11-28",
"count": 1
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-09",
"count": 1
},
{
"date": "2024-01-04",
"count": 1
},
{
"date": "2024-01-16",
"count": 2
},
{
"date": "2024-02-23",
"count": 1
},
{
"date": "2024-02-26",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-05-10",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-06",
"count": 4
},
{
"date": "2024-06-10",
"count": 1
},
{
"date": "2024-06-11",
"count": 1
},
{
"date": "2024-07-15",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-08-14",
"count": 1
},
{
"date": "2024-08-17",
"count": 1
},
{
"date": "2024-08-22",
"count": 1
},
{
"date": "2024-09-02",
"count": 1
},
{
"date": "2024-09-15",
"count": 1
},
{
"date": "2024-11-11",
"count": 1
},
{
"date": "2024-11-12",
"count": 2
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2025-02-27",
"count": 1
},
{
"date": "2025-03-12",
"count": 2
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-06-09",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-07-22",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-12-21",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-03-26",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
}
],
"complete": true,
"collected": 303,
"total_stars": 304
},
"open_issues_and_prs": 33
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 13259,
"source_files_sampled": 170,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "composer/composer",
"direct": false,
"version": "2.9.8",
"severity": "high",
"ecosystem": "packagist",
"cvss_score": 7,
"advisory_ids": [
"GHSA-499r-g7pc-vmp9",
"GHSA-g6xq-892h-64w3",
"GHSA-gjfg-22fp-rrxx"
],
"fixed_version": "2.10.2",
"advisory_count": 3,
"oldest_advisory_days": 1
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1
},
"advisory_count": 3,
"affected_count": 1,
"assessed_count": 49,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 5,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "loophp/phposinfo",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.6 || ^1.7"
},
{
"name": "seld/jsonlint",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.7.1"
},
{
"name": "symfony/console",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^4.0 || ^5.0 || ^6.0 || ^7.0 || ^8.0"
},
{
"name": "vaimo/topological-sort",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.0 || ^2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "loophp/phposinfo",
"direct": true,
"version": "1.8.0",
"ecosystem": "packagist"
},
{
"name": "seld/jsonlint",
"direct": true,
"version": "1.11.0",
"ecosystem": "packagist"
},
{
"name": "symfony/console",
"direct": true,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "vaimo/topological-sort",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vaimo/topological-sort",
"direct": true,
"version": "2.0.1",
"ecosystem": "packagist"
},
{
"name": "camspiers/json-pretty",
"direct": false,
"version": "1.0.2",
"ecosystem": "packagist"
},
{
"name": "composer-plugin-api",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/ca-bundle",
"direct": false,
"version": "1.5.11",
"ecosystem": "packagist"
},
{
"name": "composer/class-map-generator",
"direct": false,
"version": "1.7.3",
"ecosystem": "packagist"
},
{
"name": "composer/composer",
"direct": false,
"version": "2.9.8",
"ecosystem": "packagist"
},
{
"name": "composer/metadata-minifier",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "composer/pcre",
"direct": false,
"version": "3.3.2",
"ecosystem": "packagist"
},
{
"name": "composer/semver",
"direct": false,
"version": "3.4.4",
"ecosystem": "packagist"
},
{
"name": "composer/spdx-licenses",
"direct": false,
"version": "1.6.0",
"ecosystem": "packagist"
},
{
"name": "composer/xdebug-handler",
"direct": false,
"version": "3.0.5",
"ecosystem": "packagist"
},
{
"name": "justinrainbow/json-schema",
"direct": false,
"version": "6.8.2",
"ecosystem": "packagist"
},
{
"name": "marc-mabe/php-enum",
"direct": false,
"version": "4.7.2",
"ecosystem": "packagist"
},
{
"name": "mustache/mustache",
"direct": false,
"version": "3.2.0",
"ecosystem": "packagist"
},
{
"name": "pdepend/pdepend",
"direct": false,
"version": "2.16.2",
"ecosystem": "packagist"
},
{
"name": "phpcompatibility/php-compatibility",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpcompatibility/php-compatibility",
"direct": false,
"version": "9.3.5",
"ecosystem": "packagist"
},
{
"name": "phpmd/phpmd",
"direct": false,
"version": "2.15.0",
"ecosystem": "packagist"
},
{
"name": "psr/container",
"direct": false,
"version": "2.0.2",
"ecosystem": "packagist"
},
{
"name": "psr/log",
"direct": false,
"version": "3.0.2",
"ecosystem": "packagist"
},
{
"name": "react/promise",
"direct": false,
"version": "3.3.0",
"ecosystem": "packagist"
},
{
"name": "seld/phar-utils",
"direct": false,
"version": "1.2.1",
"ecosystem": "packagist"
},
{
"name": "seld/signal-handler",
"direct": false,
"version": "2.0.2",
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": "3.13.5",
"ecosystem": "packagist"
},
{
"name": "symfony/config",
"direct": false,
"version": "7.4.10",
"ecosystem": "packagist"
},
{
"name": "symfony/dependency-injection",
"direct": false,
"version": "7.4.10",
"ecosystem": "packagist"
},
{
"name": "symfony/deprecation-contracts",
"direct": false,
"version": "3.7.0",
"ecosystem": "packagist"
},
{
"name": "symfony/filesystem",
"direct": false,
"version": "7.4.11",
"ecosystem": "packagist"
},
{
"name": "symfony/finder",
"direct": false,
"version": "8.0.8",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-ctype",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-intl-grapheme",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-intl-normalizer",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-mbstring",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php73",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php80",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php81",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php84",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/process",
"direct": false,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "symfony/service-contracts",
"direct": false,
"version": "3.7.0",
"ecosystem": "packagist"
},
{
"name": "symfony/string",
"direct": false,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "symfony/var-exporter",
"direct": false,
"version": "8.0.9",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-changelogs",
"direct": false,
"version": "2.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-local",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-proxy",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target1",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target2",
"direct": false,
"version": "1.2.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target3",
"direct": false,
"version": "1.2.3",
"ecosystem": "packagist"
},
{
"name": "vaimo/patches-file-owner",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/patches-search-owner",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 54,
"direct_count": 5,
"indirect_count": 49
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 58,
"open_issues": 31,
"closed_ratio": 0.627,
"closed_issues": 52,
"closed_unmerged_prs": 15
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jooname",
"commits": 104,
"avatar_url": "https://avatars.githubusercontent.com/u/36262953?v=4"
},
{
"type": "User",
"login": "allanpaiste",
"commits": 82,
"avatar_url": "https://avatars.githubusercontent.com/u/3738135?v=4"
},
{
"type": "User",
"login": "cweagans",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/101590?v=4"
},
{
"type": "User",
"login": "zamoroka",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/9164112?v=4"
},
{
"type": "User",
"login": "fabianx-ai",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/354804?v=4"
},
{
"type": "User",
"login": "adamj88",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1053393?v=4"
},
{
"type": "User",
"login": "peterjaap",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/431360?v=4"
},
{
"type": "User",
"login": "KDederichs",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/24696606?v=4"
},
{
"type": "User",
"login": "ukgodzuki",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/240904750?v=4"
},
{
"type": "User",
"login": "Seldaek",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/183678?v=4"
}
],
"contributors_sampled": 36,
"top_contributor_share": 0.351
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"phpcs.xml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"composer.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 2/10 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca8c3670a6d04f6c08ef23561ee4de71c86f2f87",
"ran_at": "2026-07-22T05:49:36Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T00:46:30Z",
"oldest_open_prs": [
{
"number": 101,
"created_at": "2022-08-23T11:18:30Z",
"last_comment_at": "2022-09-23T14:02:34Z",
"last_comment_author": "vaimo-wilko"
},
{
"number": 158,
"created_at": "2026-07-20T19:29:31Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-12T07:52:49Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 25,
"created_at": "2019-03-28T12:52:48Z",
"last_comment_at": "2024-07-09T10:23:58Z",
"last_comment_author": "peterjaap"
},
{
"number": 40,
"created_at": "2019-09-29T19:38:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2019-10-22T08:44:24Z",
"last_comment_at": "2019-10-23T07:21:56Z",
"last_comment_author": "allanpaiste"
},
{
"number": 46,
"created_at": "2019-11-06T10:36:54Z",
"last_comment_at": "2021-03-19T15:21:54Z",
"last_comment_author": "allanpaiste"
},
{
"number": 50,
"created_at": "2019-11-21T15:31:55Z",
"last_comment_at": "2019-11-22T09:22:32Z",
"last_comment_author": "4n70w4"
},
{
"number": 52,
"created_at": "2020-01-16T22:03:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 54,
"created_at": "2020-02-26T21:27:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2020-03-12T14:04:51Z",
"last_comment_at": "2020-05-22T11:57:23Z",
"last_comment_author": "allanpaiste"
},
{
"number": 57,
"created_at": "2020-03-16T07:42:23Z",
"last_comment_at": "2020-03-17T20:08:02Z",
"last_comment_author": "allanpaiste"
},
{
"number": 60,
"created_at": "2020-09-16T07:30:37Z",
"last_comment_at": "2020-09-28T08:20:36Z",
"last_comment_author": "allanpaiste"
},
{
"number": 61,
"created_at": "2020-10-22T12:01:40Z",
"last_comment_at": "2023-02-21T09:54:24Z",
"last_comment_author": "michaelarnauts"
},
{
"number": 64,
"created_at": "2021-02-04T13:11:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 66,
"created_at": "2021-02-05T07:59:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 68,
"created_at": "2021-02-17T15:54:33Z",
"last_comment_at": "2021-02-23T08:32:19Z",
"last_comment_author": "ihor-sviziev"
},
{
"number": 69,
"created_at": "2021-02-22T11:29:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 71,
"created_at": "2021-02-24T01:45:34Z",
"last_comment_at": "2021-02-25T07:59:20Z",
"last_comment_author": "allanpaiste"
},
{
"number": 72,
"created_at": "2021-02-24T11:22:56Z",
"last_comment_at": "2021-02-25T19:39:14Z",
"last_comment_author": "allanpaiste"
},
{
"number": 76,
"created_at": "2021-03-09T19:09:12Z",
"last_comment_at": "2021-04-13T20:57:12Z",
"last_comment_author": "chelevich"
},
{
"number": 77,
"created_at": "2021-03-19T15:47:03Z",
"last_comment_at": "2021-03-20T08:25:14Z",
"last_comment_author": "allanpaiste"
},
{
"number": 78,
"created_at": "2021-04-30T17:46:23Z",
"last_comment_at": "2022-05-17T21:49:15Z",
"last_comment_author": "djacques4gorilla"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/vaimo/composer-patches",
"host": "github.com",
"name": "composer-patches",
"owner": "vaimo"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 57,
"vitality": 77,
"community": 60,
"governance": 71,
"engineering": 84
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 77,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"commits_last_year": 40,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "40 commits in the last year",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 40
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 65,
"latest_release_tag": "5.6.1",
"releases_from_tags": false,
"days_since_latest_release": 39,
"mean_days_between_releases": 37
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "65 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 65
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 39 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 39
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~37 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 37
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 39,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 39 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 39
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"forks": 45,
"stars": 304,
"watchers": 8,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "304 stars",
"points": 40.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 304
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "45 forks",
"points": 13.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 45
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"packages": [
"vaimo/composer-patches"
],
"dependents": 23,
"ecosystems": "packagist",
"total_downloads": 4670819,
"monthly_downloads": 91770
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "91,770 downloads/month across packagist",
"points": 66.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 91770,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "23 packages depend on it",
"points": 9.2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 23
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 71,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 36,
"top_contributor_share": 0.351
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 35% of commits",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 35
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "36 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 36
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"merged_prs": 58,
"open_issues": 31,
"closed_issues": 52,
"issue_closed_ratio": 0.627,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "63% of issues closed",
"points": 29.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 63
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/73 decided PRs merged",
"points": 30.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 73
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/10 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 41,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "vaimo",
"public_repos": 117,
"account_age_days": 5251
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "41 followers of vaimo",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 41,
"login": "vaimo"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "117 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 117
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"vaimo/composer-patches"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 39
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 39 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 39
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "204 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 204
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 84,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpcs.xml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"composer",
"maintenance",
"constraints",
"patching",
"patcher",
"patches",
"applier",
"composer-plugin",
"plugin",
"composer-commands",
"patch-extension",
"composer-packages",
"composer-extension"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 57,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/10 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 49 resolved dependencies against OSV; 5 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 49
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 5
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 3,
"affected_packages": 1,
"assessed_packages": 49,
"unassessed_packages": 5,
"affected_by_severity": "high 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 49,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 41,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.56,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "56 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 29.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 56,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"composer.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpcs.xml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 13259,
"source_files_sampled": 170,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/170 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 170,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T05:50:02.169683Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/vaimo/composer-patches.svg",
"full_name": "vaimo/composer-patches",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con vaimo/composer-patches. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.
