Public record
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 17:43 UTC

composer-unused / symbol-parser

Toolkit to parse symbols from a composer package

PHPMIT★ 15 stars⑂ 13 forkssince Jan 2021View on GitHub ↗

composer-unused/symbol-parser holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (71/100) and lowest on Vitality (46/100). It was last updated 162 days ago. 2 contributors account for most of its recent work.

60
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

composer-unusedOrganization
5 followers4 public repossince Nov 2019

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
Packagistcomposer-unused/symbol-parser0.3.3381,27327174 days agoparsercomposersymbol

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

46At risk · 22% of overall
How it's scored
9.9/36Push recency — last push 162 days ago
2.8/36Commit cadence — 4/52 weeks with commits
9.4/18Commit volume — 10 commits in the last year
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Inputs used
commits_last_year10
human_commit_share0.59
days_since_last_push162
active_weeks_last_year4
How it's scored
27/27Ships releases — 27 releases published
27/36Release recency — latest release 174 days ago
19.8/27Release cadence — a release every ~76.9 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count27
latest_release_tag0.3.3
releases_from_tagsno
days_since_latest_release174
mean_days_between_releases76.9
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

63Moderate · 18% of overall
How it's scored
18.6/60Stars — 15 stars
9/25Forks — 13 forks
0/15Watchers — 1 watchers
Inputs used
forks13
stars15
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

92Excellent
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
6.3/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingyes
has_issue_templateno
has_code_of_conductyes
has_pull_request_templateyes
How it's scored
74.4/80Monthly downloads — 381,273 downloads/month across packagist
3.2/20Registry dependents — 2 packages depend on it
Inputs used
packagescomposer-unused/symbol-parser
dependents2
ecosystemspackagist
total_downloads6,896,561
monthly_downloads381,273

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

71Good · 24% of overall
How it's scored
25.2/54Bus factor — 2 contributor(s) cover half of all commits
13.7/22.5Commit distribution — top contributor authored 39% of commits
13.5/13.5Contributor breadth — 11 contributors
10/10OpenSSF Scorecard: Contributors — project has 5 contributing companies or organizations
Inputs used
bus_factor2
contributors_sampled11
top_contributor_share0.393
How it's scored
46.8/46.8Issue resolution — 100% of issues closed
25.4/38.3PR acceptance — 125/188 decided PRs merged
6/15OpenSSF Scorecard: Code-Review — Found 7/15 approved changesets -- score normalized to 4
Inputs used
merged_prs125
open_issues0
closed_issues14
issue_closed_ratio1
closed_unmerged_prs63
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
5.6/25Owner reach — 5 followers of composer-unused
17.1/25Track record — 4 public repos, account ~6 yr old
Inputs used
followers5
owner_typeOrganization
is_verified
owner_logincomposer-unused
public_repos4
account_age_days2,426
How it's scored
25/25Published & resolvable — 1 package(s) on packagist
35/35Publish recency — latest publish 174 days ago
20/20Version history — 27 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagescomposer-unused/symbol-parser
ecosystemspackagist
any_deprecatedno
min_days_since_publish174

Engineering Quality

Are baseline engineering and documentation practices in place?

67Moderate · 20% of overall
How it's scored
24/24CI workflows — 1 workflow(s)
24/24Tests present
16/16Linter config — .php-cs-fixer.dist.php, phpcs.xml, phpstan.neon
0/9.6Pre-commit hooks
6.4/6.4.editorconfig
8/20OpenSSF Scorecard: CI-Tests — 10 out of 25 merged PRs checked by a CI test -- score normalized to 4
Inputs used
has_ciyes
has_testsyes
has_editorconfigyes
has_linter_configyes
has_precommit_configno

Documentation

50Moderate
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
10/10Topics — 5 topics
0/10Wiki
Inputs used
topicsphp, composer, hacktoberfest, php-parser, test
has_wikino
homepage
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

50Moderate · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — no data
1/2.5CI-Tests — 10 out of 25 merged PRs checked by a CI test -- score normalized to 4
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
3/7.5Code-Review — Found 7/15 approved changesets -- score normalized to 4
2.5/2.5Contributors — project has 5 contributing companies or organizations
0/10Dangerous-Workflow — no data
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — no data
0/5Pinned-Dependencies — no data
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — no data
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated12
scorecard_versionv5.5.0
checks_inconclusive6
scorecard_aggregate5
Excluded from scoring (no data or not applicable): branch_protection, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

54Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
21.7/40Legible commit history — 24 of 59 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.407
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — Makefile
22/22Automated tests
11/11Lint / format config — .php-cs-fixer.dist.php, phpcs.xml, phpstan.neon
0/11Static type checking
10/10Reproducible environment — Dockerfile
0/10Demonstrated agent practice — no agent-authored commits among the last 100
8/8Automated maintenance — 40 of the last 100 commits are automated dependency updates
0/10OpenSSF Scorecard: Pinned-Dependencies — no data
Inputs used
has_nixno
has_testsyes
lockfiles
has_dockerfileyes
typed_languageno
bootstrap_filesMakefile
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0.4
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
How it's scored
0/45Type-checkable code — PHP without a type-check config
55/55Manageable file sizes — 0/110 source files over 60KB
Inputs used
primary_languagePHP
largest_source_bytes6,673
source_files_sampled110
oversized_source_files0

Key facts

15GitHub stars
11contributors
10commits, last 12 months
162days since last push
27releases
2bus factor
0open issues
Packagistpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • No resolved dependencies carried a version and a supported ecosystem

More detail

Star and fork history 0 ★ / 13 ⇿
0Stars
13Forks
19Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

03581013151312022-022024-022026-01
Major 0Minor 2Patch 17

Each point covers 4 days.

OpenSSF Scorecard 5.0 / 10
5.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 17:42 UTC

10Binary-Artifactsno binaries found in the repo
n/aBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
4CI-Tests10 out of 25 merged PRs checked by a CI test -- score normalized to 4
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
4Code-ReviewFound 7/15 approved changesets -- score normalized to 4
10Contributorsproject has 5 contributing companies or organizations
n/aDangerous-Workflowno workflows found
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
n/aPackagingpackaging workflow not detected
n/aPinned-Dependenciesno dependencies found
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
n/aToken-PermissionsNo tokens found
10Vulnerabilities0 existing vulnerabilities detected
Direct dependencies 4
RegistryPackageVersion constraintManifest
Packagistnikic/php-parser^5.0composer.json
Packagistpsr/container^1.0 || ^2.0composer.json
Packagistpsr/log^1.1 || ^2 || ^3composer.json
Packagistsymfony/finder^5.3 || ^6.0 || ^7.0 || ^8.0composer.json
All dependencies 19

Full resolved dependency set from the GitHub dependency graph: 4 direct and 15 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Packagistnikic/php-parserdirect
Packagistpsr/containerdirect
Packagistpsr/logdirect
Packagistsymfony/finderdirect
Packagistcomposer-unused/contractsindirect
Packagistergebnis/composer-normalizeindirect
Packagistext-dsindirect
Packagistext-jsonindirect
Packagistlulco/redis-proxyindirect
Packagistnette/databaseindirect
Packagistphpindirect
Packagistphpstan/phpdoc-parserindirect
Packagistphpstan/phpstanindirect
Packagistphpunit/phpunitindirect
Packagistroave/security-advisoriesindirect
Packagistsquizlabs/php_codesnifferindirect
Packagistsymfony/property-accessindirect
Packagistsymfony/serializerindirect
Packagisttest/file-dependencyindirect
Dependency advisories not assessed

Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "php",
        "composer",
        "hacktoberfest",
        "php-parser",
        "test"
      ],
      "is_fork": false,
      "size_kb": 197,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "PHP": 116503,
        "Makefile": 1625,
        "Dockerfile": 1432
      },
      "pushed_at": "2026-02-10T01:42:40Z",
      "created_at": "2021-01-24T14:55:21Z",
      "owner_type": "Organization",
      "updated_at": "2026-04-26T00:49:24Z",
      "description": "Toolkit to parse symbols from a composer package",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "PHP",
      "significant_languages": [
        "PHP"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "Organization",
      "login": "composer-unused",
      "company": null,
      "location": "Germany",
      "followers": 5,
      "avatar_url": "https://avatars.githubusercontent.com/u/58365454?v=4",
      "created_at": "2019-11-30T14:28:48Z",
      "is_verified": null,
      "public_repos": 4,
      "account_age_days": 2426
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "0.3.3",
          "kind": "patch",
          "published_at": "2026-01-29T13:39:15Z"
        },
        {
          "tag": "0.3.2",
          "kind": "patch",
          "published_at": "2026-01-29T09:50:56Z"
        },
        {
          "tag": "0.3.1",
          "kind": "patch",
          "published_at": "2025-03-19T09:14:21Z"
        },
        {
          "tag": "0.3.0",
          "kind": "minor",
          "published_at": "2025-03-17T14:39:30Z"
        },
        {
          "tag": "0.2.8",
          "kind": "patch",
          "published_at": "2025-03-17T14:36:02Z"
        },
        {
          "tag": "0.2.7",
          "kind": "patch",
          "published_at": "2025-03-16T12:14:52Z"
        },
        {
          "tag": "0.2.6",
          "kind": "patch",
          "published_at": "2025-03-15T10:28:48Z"
        },
        {
          "tag": "0.2.5",
          "kind": "patch",
          "published_at": "2024-03-09T17:11:31Z"
        },
        {
          "tag": "0.2.4",
          "kind": "patch",
          "published_at": "2024-03-08T11:24:49Z"
        },
        {
          "tag": "0.2.3",
          "kind": "patch",
          "published_at": "2024-03-08T06:10:17Z"
        },
        {
          "tag": "0.2.2",
          "kind": "patch",
          "published_at": "2023-11-30T16:37:56Z"
        },
        {
          "tag": "0.2.1",
          "kind": "patch",
          "published_at": "2023-03-17T00:46:11Z"
        },
        {
          "tag": "0.2.0",
          "kind": "minor",
          "published_at": "2023-03-16T20:20:21Z"
        },
        {
          "tag": "0.1.13",
          "kind": "patch",
          "published_at": "2023-03-16T08:57:23Z"
        },
        {
          "tag": "0.1.12",
          "kind": "patch",
          "published_at": "2023-03-10T13:52:35Z"
        },
        {
          "tag": "0.1.11",
          "kind": "patch",
          "published_at": "2022-12-22T11:06:04Z"
        },
        {
          "tag": "0.1.10",
          "kind": "patch",
          "published_at": "2022-10-07T12:56:33Z"
        },
        {
          "tag": "0.1.9",
          "kind": "patch",
          "published_at": "2022-05-03T19:54:27Z"
        },
        {
          "tag": "0.1.8",
          "kind": "patch",
          "published_at": "2022-03-09T17:46:41Z"
        },
        {
          "tag": "0.1.7",
          "kind": "patch",
          "published_at": "2022-02-15T20:13:31Z"
        },
        {
          "tag": "0.1.6",
          "kind": "patch",
          "published_at": "2022-02-08T12:00:42Z"
        },
        {
          "tag": "0.1.5",
          "kind": "patch",
          "published_at": "2022-02-03T11:16:53Z"
        },
        {
          "tag": "0.1.4",
          "kind": "patch",
          "published_at": "2022-01-05T10:14:01Z"
        },
        {
          "tag": "0.1.3",
          "kind": "patch",
          "published_at": "2021-08-02T08:47:00Z"
        },
        {
          "tag": "0.1.2",
          "kind": "patch",
          "published_at": "2021-08-01T08:59:18Z"
        },
        {
          "tag": "0.1.1",
          "kind": "patch",
          "published_at": "2021-08-01T07:44:49Z"
        },
        {
          "tag": "0.1.0",
          "kind": "minor",
          "published_at": "2021-02-12T16:57:13Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "afa62007cca768bd1ecbc0e8ed347c675c239410",
          "body": "Returning from symbol loader stops the whole iteration.\n\nWe need to only find additional files if the have them otherwise still yield from the symbolProvider.",
          "is_bot": false,
          "headline": "fix: Avoid returning from symbolLoader",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2026-01-29T13:38:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87e9a5878d513d8a6b30aeb1bde8dbdebb3badc2",
          "body": null,
          "is_bot": false,
          "headline": "chore: Add export-ignore for additional files in .gitattributes",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2026-01-29T09:48:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84c6cc2100b39cc8e5fec9c96ee8eefadefa0e1d",
          "body": "Bumps the dependencies group with 1 update in the / directory: [actions/checkout](https://github.com/actions/checkout).\n\n\nUpdates `actions/checkout` from 4 to 6\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n-\n[…]\nkout\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump actions/checkout",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-29T09:46:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b3907724150ab0541d24e2edc8c862e773a82aac",
          "body": null,
          "is_bot": false,
          "headline": "chore: Drop phpunit 9",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2026-01-29T09:42:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b214f8158d20396b243401c462f281727c276ecd",
          "body": "…th 2 updates\n\nUpdates the requirements on [ergebnis/composer-normalize](https://github.com/ergebnis/composer-normalize) and [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n\nUpdates `ergebnis/composer-normalize` to 2.49.0\n- [Release notes]\n[…]\n- dependency-name: squizlabs/php_codesniffer\n  dependency-version: 4.0.1\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): bump the dependencies group across 1 directory wi…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-29T09:09:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b63df296256ae21bda88061d81fd64735137da15",
          "body": null,
          "is_bot": false,
          "headline": "Symfony 8.0 support added",
          "author_name": "a.dmitryuk",
          "author_login": null,
          "committed_at": "2026-01-29T09:07:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f18e85c102cf9dbf77f730c26e396433d6dd5edb",
          "body": null,
          "is_bot": false,
          "headline": "Fix symfony/finder:7.3.10",
          "author_name": "a.dmitryuk",
          "author_login": null,
          "committed_at": "2026-01-27T10:59:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1999e17d90cf50000eb0855d789fe257137911cc",
          "body": "This fixes https://github.com/composer-unused/composer-unused/issues/717 by checking if the item we expect to exists actually exists.\n\nCredit goes to @samsonasik for these changes as suggested at https://github.com/rectorphp/rector/issues/9615#issuecomment-3785522360",
          "is_bot": false,
          "headline": "Fix Composer Unused Issue 717",
          "author_name": "Cees-Jan Kiewiet",
          "author_login": "WyriHaximus",
          "committed_at": "2026-01-23T05:45:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deaa2612cd92830f9637d005af6dad893b235853",
          "body": "Updates the requirements on [ergebnis/composer-normalize](https://github.com/ergebnis/composer-normalize) to permit the latest version.\n\nUpdates `ergebnis/composer-normalize` to 2.48.1\n- [Release notes](https://github.com/ergebnis/composer-normalize/releases)\n- [Changelog](https://github.com/ergebni\n[…]\nependency-name: ergebnis/composer-normalize\n  dependency-version: 2.48.1\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update ergebnis/composer-normalize requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-04T06:02:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c421700d82c6f3887684c1624be58d19eb67f87",
          "body": "Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n\nUpdates `squizlabs/php_codesniffer` to 3.13.2\n- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)\n- [Changelog](https://github.com/PHPCS\n[…]\n dependency-name: squizlabs/php_codesniffer\n  dependency-version: 3.13.2\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update squizlabs/php_codesniffer requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-19T10:39:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f67b8497c2b5bd7fa2bc91e733b846dccf3e98af",
          "body": "Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n\nUpdates `squizlabs/php_codesniffer` to 3.13.1\n- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)\n- [Changelog](https://github.com/PHPCS\n[…]\n dependency-name: squizlabs/php_codesniffer\n  dependency-version: 3.13.1\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update squizlabs/php_codesniffer requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-12T07:24:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e13bb6831b6e57c354dd56cf885b3d3aa2f71fe8",
          "body": "Bumps the dependencies group with 1 update: [shivammathur/setup-php](https://github.com/shivammathur/setup-php).\n\n\nUpdates `shivammathur/setup-php` from 2.32.0 to 2.33.0\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compar\n[…]\np\n  dependency-version: 2.33.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-20T04:16:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77ef005a0a3c6d5f68dcc687aae1996d288fd8d7",
          "body": "Updates the requirements on [ergebnis/composer-normalize](https://github.com/ergebnis/composer-normalize) and [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n\nUpdates `ergebnis/composer-normalize` to 2.46.0\n- [Release notes](https://github\n[…]\n dependency-name: squizlabs/php_codesniffer\n  dependency-version: 3.12.2\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): bump the dependencies group with 2 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-13T07:14:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97108c464822cfb2e23ab3af76d40ba3557dd529",
          "body": null,
          "is_bot": true,
          "headline": "Migrate workflows to Blacksmith",
          "author_name": "blacksmith-sh[bot]",
          "author_login": "blacksmith-sh[bot]",
          "committed_at": "2025-05-06T10:44:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f1bf9e02e4969b7466beef882ec23b2e7bb9cc2",
          "body": "Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n\nUpdates `squizlabs/php_codesniffer` to 3.12.0\n- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)\n- [Changelog](https://github.com/PHPCS\n[…]\n\n\n---\nupdated-dependencies:\n- dependency-name: squizlabs/php_codesniffer\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update squizlabs/php_codesniffer requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-08T04:46:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a55ecd3c10867be27a2eabf31cd1600160d250ae",
          "body": null,
          "is_bot": false,
          "headline": "fix: Avoid implicit null argument for php 8.4",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2025-03-19T09:13:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3cb51088fc10fa6a1d8ddba866e37c66fe4901a",
          "body": "Updates the requirements on [ergebnis/composer-normalize](https://github.com/ergebnis/composer-normalize), [phpstan/phpstan](https://github.com/phpstan/phpstan) and [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n\nUpdates `ergebnis/compose\n[…]\nendency-group: dependencies\n- dependency-name: squizlabs/php_codesniffer\n  dependency-type: direct:development\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): bump the dependencies group with 3 updates",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-18T07:00:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c9eb306d47d90f5c9072ecc3d39a201bb443d242",
          "body": "Bumps the dependencies group with 1 update: [shivammathur/setup-php](https://github.com/shivammathur/setup-php).\n\n\nUpdates `shivammathur/setup-php` from 2.30.0 to 2.32.0\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compar\n[…]\ny-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-18T06:14:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c4d9d44abd0315146c3476d6e4d57ef7e0bfcd5",
          "body": null,
          "is_bot": false,
          "headline": "chore: Remove support for php-parser v4",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2025-03-17T14:39:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7576ca41ca6ebd46b3c4f18d6adb6f1b340bb694",
          "body": "php-parser in v5 introduced the `name` property.\nIn v4 there was only `getParts`. This solves an undefined property issue when using php-parser v4",
          "is_bot": false,
          "headline": "fix: Add fallback resolution for parts or name",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2025-03-17T14:27:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66dda4bef0a49d928d34744674f204a2530e4500",
          "body": "The ClassConstStrategy needs to return the actual class instead of the full const name including the class. As this is the actual class being used.",
          "is_bot": false,
          "headline": "fix: ClassConstStrategy should return the class symbol",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2025-03-16T12:14:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de4296816dc023d1b932d5ea62536aecc1c51d85",
          "body": null,
          "is_bot": false,
          "headline": "fix: Use new DoctrineTagValueNode to extract name of annotation",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2025-03-15T10:27:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62d726b5d0caa8e2f0afc6b5e3d56081644e2d3d",
          "body": null,
          "is_bot": false,
          "headline": "Add support for phpstan/phpdoc-parser v2",
          "author_name": "Cees-Jan Kiewiet",
          "author_login": "WyriHaximus",
          "committed_at": "2025-03-15T10:27:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8119769b0520bcf699fa8ae070d14ba525677e21",
          "body": null,
          "is_bot": false,
          "headline": "Run unit tests on PHP 8.3 and PHP 8.4 as well",
          "author_name": "Cees-Jan Kiewiet",
          "author_login": "WyriHaximus",
          "committed_at": "2025-03-13T11:40:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9eed08b9b18e49461e19b941b26e35e8169d4bdb",
          "body": "…ips already visited files (integration test)",
          "is_bot": false,
          "headline": "composer-unused/composer-unused#659 Symbol parser test ensuring it sk…",
          "author_name": "Mihai Stancu",
          "author_login": "mihai-stancu",
          "committed_at": "2025-03-12T17:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b3cf269f6057b9b8c873644f911e207a2b8f8d2",
          "body": "… cover syntactic edge-cases for switch cases",
          "is_bot": false,
          "headline": "composer-unused/composer-unused#659 AbstractCollector::followIncludes…",
          "author_name": "Mihai Stancu",
          "author_login": "mihai-stancu",
          "committed_at": "2025-03-12T17:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6732a5597cf8ed2f2556ebf75c559c9f1472b1cc",
          "body": "…ips already visited files",
          "is_bot": false,
          "headline": "composer-unused/composer-unused#659 Symbol parser test ensuring it sk…",
          "author_name": "Mihai Stancu",
          "author_login": "mihai-stancu",
          "committed_at": "2025-03-12T17:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fc2f850b2b9eb7e9815c3da7b491919a758d47b",
          "body": "… should skip already visited files.",
          "is_bot": false,
          "headline": "composer-unused/composer-unused#659 AbstractCollector::followIncludes…",
          "author_name": "Mihai Stancu",
          "author_login": "mihai-stancu",
          "committed_at": "2025-03-12T17:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96cee7244aea405e936247d42c49332d52d90ae7",
          "body": null,
          "is_bot": false,
          "headline": "drop support to Symfony 4.4 (#158)",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-03-09T15:25:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75bc85382311fa8abca4e1f5ae0e11211fb9d16a",
          "body": null,
          "is_bot": false,
          "headline": "fix issue #136",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-03-09T08:20:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c16a55cfa360efc21218c8f4c831e246d7095a58",
          "body": null,
          "is_bot": false,
          "headline": "Update validate-code.yml",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2024-03-08T11:46:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2b2c0d332d184601164049168099c0716c166da",
          "body": null,
          "is_bot": false,
          "headline": "Update dependabot.yaml",
          "author_name": "Andreas Frömer",
          "author_login": "icanhazstring",
          "committed_at": "2024-03-08T11:42:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd88aec9c5f0587b4a10390303eb382ae4d28cde",
          "body": null,
          "is_bot": false,
          "headline": "fix issue #122",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-03-08T10:15:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "460096c3b0e1714890c2953155df874397ec73e0",
          "body": null,
          "is_bot": false,
          "headline": "fix namespace separator for class constant resolution",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-03-07T16:59:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b9fd579d20269de2b49721abc29878aad319578",
          "body": null,
          "is_bot": false,
          "headline": "fix issue #142",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-03-07T16:59:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3901eafdf3e2d2aa24bbda1495ab74377f903e2",
          "body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.29.0 to 2.30.0.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.29.0...2.30.0)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php from 2.29.0 to 2.30.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-07T11:48:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5664a915851a7a9d846d56226765f19290f8e58",
          "body": null,
          "is_bot": false,
          "headline": "fix issue #148",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-03-07T10:34:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abd75e17d2ea3a6577f0174d364746bb34517716",
          "body": "…ymbol-parser/issues/122#issuecomment-1963358245",
          "is_bot": false,
          "headline": "fix issue accordingly to comment https://github.com/composer-unused/s…",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-27T15:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc0407531e802bbd973d80d71c475049a4fdf35d",
          "body": null,
          "is_bot": false,
          "headline": "fixed issue #136 and implement new feature #137",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-27T15:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffb1de09580e738fdd738a2e11941d406347efdb",
          "body": null,
          "is_bot": false,
          "headline": "add declare_strict_types if necessary and remove unused import",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-24T13:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "069121597b4bb4c9a2db97a5a046ddf664f9ec0a",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump actions/checkout from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-02-24T07:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4c3353785298577d5e5ea532a30b7b4acb77216",
          "body": "… from shivammathur/setup-php@v2",
          "is_bot": false,
          "headline": "remove temporary workaround about PHPUnit 9.6; restore official tools…",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-23T15:27:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e9baec3e64e6cbc1cc37c882d42a6324930f5af",
          "body": "Updates the requirements on [ergebnis/composer-normalize](https://github.com/ergebnis/composer-normalize) to permit the latest version.\n- [Release notes](https://github.com/ergebnis/composer-normalize/releases)\n- [Changelog](https://github.com/ergebnis/composer-normalize/blob/main/CHANGELOG.md)\n- [C\n[…]\nmalize/compare/2.28.0...2.42.0)\n\n---\nupdated-dependencies:\n- dependency-name: ergebnis/composer-normalize\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update ergebnis/composer-normalize requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-02-22T07:01:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a0002aa5a391780c3019cc0ddcede11ac282d3b",
          "body": "Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.\n- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)\n- [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/master/CHANGELOG\n[…]\nodeSniffer/compare/3.7.2...3.9.0)\n\n---\nupdated-dependencies:\n- dependency-name: squizlabs/php_codesniffer\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update squizlabs/php_codesniffer requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-02-22T06:49:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "abf025c3a59cf0ec14c79382faba00ca931e49b5",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.23.0...1.25.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-02-22T06:45:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31eab42507d42d5c2599cfa56b6a3c32143070e2",
          "body": null,
          "is_bot": false,
          "headline": "use PHPUnit dev dependency installed by Composer",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-22T06:41:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "446a407cfdc526b683933ef960faa87f9aeca205",
          "body": null,
          "is_bot": false,
          "headline": "fix compatibility between PHP-Parser 4.18 and 5.0",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-22T06:41:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b674c3acdbb8285e3858c371fbaa463888d86178",
          "body": null,
          "is_bot": false,
          "headline": "add support to PHP-Parser 5.0",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-22T06:41:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "955b3da1a65bb92d1dfa74b8754da3d1258f9a4a",
          "body": null,
          "is_bot": false,
          "headline": "add typed properties when missing",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-20T07:35:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50c666f85f0f9bf4caf5d2c21bf2f77b2c386a10",
          "body": null,
          "is_bot": false,
          "headline": "fixed global namespace imports",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-20T05:46:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d52e980287e4eac9dd7b9a1277c19226bb53e53c",
          "body": "…ous with global imports",
          "is_bot": false,
          "headline": "add PHP CS Fixer \"global_namespace_import\" rule to have code homogene…",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-20T05:46:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "031a2dec4827c34ff248a35175429b190866a3b9",
          "body": null,
          "is_bot": false,
          "headline": "avoid to commit PHP CS Fixer cache file",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-18T20:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58d231cad9e7da0d3c591baac9afe2e20d7e7389",
          "body": null,
          "is_bot": false,
          "headline": "fix PHPMD unusedcode rules violation",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-18T20:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "845fd10963ff7ce7d8f2c77757d87f9dabff8fc2",
          "body": null,
          "is_bot": false,
          "headline": "remove unused imports",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-18T20:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efde3ed60ccc8e2297f8ebb7001df0cb59e8b8fc",
          "body": null,
          "is_bot": false,
          "headline": "add basic PHP CS Fixer config file",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-18T20:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ff204fb72c60ac0f65f8f87f2246dbb8ff97c39",
          "body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.25.2 to 2.29.0.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.25.2...2.29.0)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php from 2.25.2 to 2.29.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-02-18T11:30:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b5a3f48d562b3c760b3f3ee6850093f9abdecd5",
          "body": null,
          "is_bot": false,
          "headline": "do not run PHPUnit 10 for PHP 7.4 and 8.0 (unsupported)",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-18T11:19:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe05ae5b422bb63922d467b70f960a9e1529c2b9",
          "body": null,
          "is_bot": false,
          "headline": "add support to PHPUnit 10",
          "author_name": "Laurent Laville",
          "author_login": "llaville",
          "committed_at": "2024-02-18T11:19:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "528cf09e0c78de2cf2ffd2fc8d4b7db7cbd85576",
          "body": null,
          "is_bot": false,
          "headline": "Add symfony 7 support",
          "author_name": "Vincent Langlet",
          "author_login": "VincentLanglet",
          "committed_at": "2023-11-30T16:36:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "872cf1d4620cddb9d983785d36fd352f273dc605",
          "body": "Updates the requirements on [nikic/php-parser](https://github.com/nikic/PHP-Parser) to permit the latest version.\n- [Release notes](https://github.com/nikic/PHP-Parser/releases)\n- [Changelog](https://github.com/nikic/PHP-Parser/blob/4.x/CHANGELOG.md)\n- [Commits](https://github.com/nikic/PHP-Parser/compare/v4.16.0...v4.17.1)\n\n---\nupdated-dependencies:\n- dependency-name: nikic/php-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update nikic/php-parser requirement from ^4.16 to ^4.17",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-08-15T05:28:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bf6866931b618eeea9f76b000b1aa08121a40cf",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.22.0...1.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-07-25T06:08:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28c2a835426b6ea010ef2705f1820a07eb7036f9",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.10/ChangeLog-9.6.md)\n- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.9...9.6.10)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-07-11T04:47:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ee7e8316ce533406d89aa0524a892a10ac92d7d",
          "body": null,
          "is_bot": false,
          "headline": "Bump nikic/php-parser to 4.16",
          "author_name": "Abdul Malik Ikhsan",
          "author_login": "samsonasik",
          "committed_at": "2023-06-25T15:56:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c825edaa40acc97504089d4741dc71e2aece54d",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.16.0...1.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-06-13T07:19:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b352dfeb98b1264083ed6b0a0523e448328dd0a8",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.9/ChangeLog-9.6.md)\n- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.8...9.6.9)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-06-13T05:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50ad8c4d56bea402caf977175f5f3677d808f764",
          "body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.24.0 to 2.25.2.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.24.0...2.25.2)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php from 2.24.0 to 2.25.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-05-26T00:01:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aefab5016d093a44c5038b6fed5d6dd9da7afc40",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/9.6.8/ChangeLog-9.6.md)\n- [Commits](https://github.com/sebastianbergmann/phpunit/compare/9.6.6...9.6.8)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-05-12T05:53:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46bc7618a3cfdd476e81dc881e469241ac76f824",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/main/ChangeLog-9.6.md)\n- [Commits](https:\n[…]\ntianbergmann/phpunit/compare/9.6.5...9.6.6)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-03-28T06:56:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a395a555aa38b63cadf9b2f396880ac86abb44a9",
          "body": null,
          "is_bot": false,
          "headline": "Require composer-unused/contracts v0.3",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-17T00:45:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cf47fdd76a240da4a4cc518d74c820726637efe",
          "body": null,
          "is_bot": false,
          "headline": "Update .github templates",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-16T20:58:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30927b34dc22c97a8b54bf967c3ffac4311f032b",
          "body": null,
          "is_bot": false,
          "headline": "Update CHANGELOG",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-16T20:50:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad22455949835439823740713e2a4b0b630db229",
          "body": null,
          "is_bot": false,
          "headline": "Update LICENSE",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-16T20:41:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f771d4591ffb8d3f054bcad445db971ff20e4c0",
          "body": "Name resolving of namespaced symbols (such as classes,\nfunctions and constants) is now done through PHP-Parser's\nNameResolver. By using it as an additional node visitor,\nwe add a safe additional layer on top of the collection\nstrategies provided by the symbol-parser package.\n\nThis also makes the fix introduced with 13fd5e9 obsolete\nnow, as the NameResolver is more accurate.",
          "is_bot": false,
          "headline": "Handle name resolving with PHP-Parser's NameResolver",
          "author_name": "Elias Häußler",
          "author_login": "eliashaeussler",
          "committed_at": "2023-03-16T19:10:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b27a05bd11d84b805a91e047232764313336a620",
          "body": "This reverts commit 7d95ce3283e922c1ca39110197401e5812c1a13c.",
          "is_bot": false,
          "headline": "Revert \"Fix: Match short namespace symbols\"",
          "author_name": "Elias Häußler",
          "author_login": "eliashaeussler",
          "committed_at": "2023-03-16T19:10:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d95ce3283e922c1ca39110197401e5812c1a13c",
          "body": "When using short namespaces instead of full namespaces, the symbol\nshould properly match in order to detect usages of a required package.\n\nExample:\n\n    A package with PSR-4 namespace \"Cocur\\Slugify\\\" is required. The\n    project code base contains the following class:\n\n    <?php\n\n    use Cocur\\Slug\n[…]\ntrailing backslash whereas\nthe imported namespace in the class does not.\n\nTo resolve incorrect behavior in such cases, a trailing backslash is\nnow always appended to the constructed namespace symbols.",
          "is_bot": false,
          "headline": "Fix: Match short namespace symbols",
          "author_name": "Elias Häußler",
          "author_login": "eliashaeussler",
          "committed_at": "2023-03-16T08:54:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "20d0fa18b218f750f5613d458df5ac998729040c",
          "body": null,
          "is_bot": false,
          "headline": "Split up test cases",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-13T09:00:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07310a94b24e6fd1a627f47bb84c36ae7a3f71f2",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.12.0...1.16.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-03-10T13:45:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e74a96afabc2e6792dc6a63bd1be79fa8f59c60a",
          "body": "Updates the requirements on [phpstan/phpstan](https://github.com/phpstan/phpstan) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpstan/releases)\n- [Changelog](https://github.com/phpstan/phpstan/blob/1.10.x/CHANGELOG.md)\n- [Commits](https://github.com/phpstan/phpstan/compare/1.9.0...1.10.1)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpstan\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpstan/phpstan requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-03-10T13:41:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e6bbbe8a853b968e135c43550a84ba55f1fa285",
          "body": null,
          "is_bot": false,
          "headline": "Add test cases to avoid undefined property calls",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-10T13:38:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51273c6ba22c5fa77a38ce3fa521704b0a0b815a",
          "body": "Updates the requirements on [squizlabs/php_codesniffer](https://github.com/squizlabs/PHP_CodeSniffer) to permit the latest version.\n- [Release notes](https://github.com/squizlabs/PHP_CodeSniffer/releases)\n- [Commits](https://github.com/squizlabs/PHP_CodeSniffer/compare/3.7.1...3.7.2)\n\n---\nupdated-dependencies:\n- dependency-name: squizlabs/php_codesniffer\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update squizlabs/php_codesniffer requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-03-10T12:56:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47bda761c65005cdf00afc62ad19f6a87690ecc6",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/main/ChangeLog-9.6.md)\n- [Commits](https:\n[…]\nianbergmann/phpunit/compare/9.5.27...9.6.5)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-03-10T12:53:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8412539cf0843594778bab9a0eaa42c95aa573b6",
          "body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.22.0 to 2.24.0.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.22.0...2.24.0)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php from 2.22.0 to 2.24.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-03-10T12:51:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bf9b5979eb400eea25b4a324d68cc7eb6e256ef",
          "body": "Resolves: composer-unused#422",
          "is_bot": false,
          "headline": "Ignore non existing files/dirs",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2023-03-10T12:40:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b65491f9e1535c54fa7c2dd25d2c4ea232128bca",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/main/ChangeLog-9.5.md)\n- [Commits](https:\n[…]\nanbergmann/phpunit/compare/9.5.25...9.5.27)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-12-15T15:54:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c6efde75bc1b16415e8ae7bbb9d6169fac9ebb1",
          "body": null,
          "is_bot": false,
          "headline": "feat: add support for excludedDirs into FileSymbolLoader",
          "author_name": "Simon Podlipsky",
          "author_login": "simPod",
          "committed_at": "2022-12-09T20:51:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c9b6c5231b335419b3e37c612f7cc375c68d02a",
          "body": "Updates the requirements on [phpstan/phpstan](https://github.com/phpstan/phpstan) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpstan/releases)\n- [Changelog](https://github.com/phpstan/phpstan/blob/1.9.x/CHANGELOG.md)\n- [Commits](https://github.com/phpstan/phpstan/compare/1.8.0...1.9.1)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpstan\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpstan/phpstan requirement from ^1.8 to ^1.9",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-11-08T05:58:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d189d4291f653b53e3b9a1bd572079d194e50b20",
          "body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.21.2 to 2.22.0.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.21.2...2.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php from 2.21.2 to 2.22.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-10-29T06:51:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1688caacb02934d1f094d3b6ec3b98e13517c584",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.11.0...1.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-10-21T05:05:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14f8146479307aa39a02faf974652ea730c1ac40",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.10.0...1.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-10-15T08:20:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc4f0c75cc8242674503018da3bc3125ea2238af",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.9.0...1.10.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-10-13T05:46:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19476734741cd1bd022b492ab4bede1ce0f6840c",
          "body": "Updates the requirements on [phpstan/phpdoc-parser](https://github.com/phpstan/phpdoc-parser) to permit the latest version.\n- [Release notes](https://github.com/phpstan/phpdoc-parser/releases)\n- [Commits](https://github.com/phpstan/phpdoc-parser/compare/1.8.0...1.9.0)\n\n---\nupdated-dependencies:\n- dependency-name: phpstan/phpdoc-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update phpstan/phpdoc-parser requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-10-08T05:39:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b57dc7924b8017c47087bf2fd6b125c1facdee47",
          "body": null,
          "is_bot": false,
          "headline": "#62 Support more types of annotations",
          "author_name": "Leo Viezens",
          "author_login": "LeoVie",
          "committed_at": "2022-10-07T12:49:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "500791051dad9b9b41904634e4b785902b9ae856",
          "body": null,
          "is_bot": false,
          "headline": "#62 Add more examples to test",
          "author_name": "Leo Viezens",
          "author_login": "LeoVie",
          "committed_at": "2022-10-07T12:49:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac7bac663266b385df240254e70bc270ba68a35e",
          "body": null,
          "is_bot": false,
          "headline": "Add type safety",
          "author_name": "Leo Viezens",
          "author_login": "LeoVie",
          "committed_at": "2022-10-07T12:49:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8168f268c625dbf10f7daaed68e58abe14f5cc4f",
          "body": null,
          "is_bot": false,
          "headline": "Add AnnotationStrategy",
          "author_name": "Leo Viezens",
          "author_login": "LeoVie",
          "committed_at": "2022-10-07T12:49:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e908f62c1afd0faa88dd58e765aff6f76e8a9d3a",
          "body": null,
          "is_bot": false,
          "headline": "Return empty symbol list when reflection could not be loaded",
          "author_name": "Andreas Frömer",
          "author_login": null,
          "committed_at": "2022-10-05T20:16:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "312b7a10fd4bd87eabcc1909f3aa0704ff33ee35",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/main/ChangeLog-9.5.md)\n- [Commits](https:\n[…]\nanbergmann/phpunit/compare/9.5.24...9.5.25)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-09-27T08:15:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c56ff44edf9bc5280251f2fbf4433d09fa8ae2f",
          "body": "Updates the requirements on [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) to permit the latest version.\n- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/main/ChangeLog-9.5.md)\n- [Commits](https:\n[…]\nanbergmann/phpunit/compare/9.5.21...9.5.24)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps-dev): update phpunit/phpunit requirement",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-09-20T09:51:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "216c48beeb6fbd6e2f5db4e63e827e46eccb2161",
          "body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.21.1 to 2.21.2.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/2.21.1...2.21.2)\n\n---\nupdated-dependencies:\n- dependency-name: shivammathur/setup-php\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "github-actions(deps): bump shivammathur/setup-php from 2.21.1 to 2.21.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-09-20T09:45:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdefdf666d97c329f9ea72261a48e7f5604d64dd",
          "body": "Updates the requirements on [nikic/php-parser](https://github.com/nikic/PHP-Parser) to permit the latest version.\n- [Release notes](https://github.com/nikic/PHP-Parser/releases)\n- [Changelog](https://github.com/nikic/PHP-Parser/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nikic/PHP-Parser/compare/v4.14.0...v4.15.1)\n\n---\nupdated-dependencies:\n- dependency-name: nikic/php-parser\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "composer(deps): update nikic/php-parser requirement from ^4.14 to ^4.15",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-09-20T09:42:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 27,
      "commits_last_year": 10,
      "latest_release_at": "2026-01-29T13:39:15Z",
      "latest_release_tag": "0.3.3",
      "releases_from_tags": false,
      "days_since_last_push": 162,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 174,
      "mean_days_between_releases": 76.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "composer-unused/symbol-parser",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "parser",
            "composer",
            "symbol"
          ],
          "ecosystem": "packagist",
          "matches_repo": true,
          "registry_url": "https://packagist.org/packages/composer-unused/symbol-parser",
          "is_deprecated": false,
          "latest_version": "0.3.3",
          "repository_url": "https://github.com/composer-unused/symbol-parser",
          "versions_count": 27,
          "total_downloads": 6896561,
          "dependents_count": 2,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 381273,
          "first_published_at": null,
          "latest_published_at": "2026-01-29T13:38:57Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 174
        }
      ]
    },
    "popularity": {
      "forks": 13,
      "stars": 15,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2022-02-08",
            "count": 1
          },
          {
            "date": "2022-03-14",
            "count": 1
          },
          {
            "date": "2022-05-24",
            "count": 1
          },
          {
            "date": "2023-03-16",
            "count": 1
          },
          {
            "date": "2023-05-12",
            "count": 1
          },
          {
            "date": "2023-06-25",
            "count": 1
          },
          {
            "date": "2024-02-16",
            "count": 1
          },
          {
            "date": "2024-08-24",
            "count": 1
          },
          {
            "date": "2025-03-07",
            "count": 1
          },
          {
            "date": "2025-03-12",
            "count": 1
          },
          {
            "date": "2025-12-01",
            "count": 1
          },
          {
            "date": "2026-01-22",
            "count": 1
          },
          {
            "date": "2026-01-26",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 13,
        "total_forks": 13
      },
      "star_history": null,
      "open_issues_and_prs": 2
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 6673,
      "source_files_sampled": 110,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "composer.json"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 19,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "packagist"
      ],
      "dependencies": [
        {
          "name": "nikic/php-parser",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^5.0"
        },
        {
          "name": "psr/container",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^1.0 || ^2.0"
        },
        {
          "name": "psr/log",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^1.1 || ^2 || ^3"
        },
        {
          "name": "symfony/finder",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^5.3 || ^6.0 || ^7.0 || ^8.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "nikic/php-parser",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "psr/container",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "psr/log",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "symfony/finder",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "composer-unused/contracts",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "ergebnis/composer-normalize",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "ext-ds",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "ext-json",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "lulco/redis-proxy",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "nette/database",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "php",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "phpstan/phpdoc-parser",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "phpstan/phpstan",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "phpunit/phpunit",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "roave/security-advisories",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "squizlabs/php_codesniffer",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "symfony/property-access",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "symfony/serializer",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "test/file-dependency",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 19,
        "direct_count": 4,
        "indirect_count": 15
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 125,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 14,
        "closed_unmerged_prs": 63
      },
      "bus_factor": 2,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "llaville",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/364342?v=4"
        },
        {
          "type": "User",
          "login": "icanhazstring",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/883543?v=4"
        },
        {
          "type": "User",
          "login": "LeoVie",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/7249788?v=4"
        },
        {
          "type": "User",
          "login": "mihai-stancu",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/1294142?v=4"
        },
        {
          "type": "User",
          "login": "agustingomes",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/15325886?v=4"
        },
        {
          "type": "User",
          "login": "eliashaeussler",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/16313625?v=4"
        },
        {
          "type": "User",
          "login": "WyriHaximus",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/147145?v=4"
        },
        {
          "type": "User",
          "login": "samsonasik",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/459648?v=4"
        },
        {
          "type": "User",
          "login": "Jean85",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/6729988?v=4"
        },
        {
          "type": "User",
          "login": "simPod",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/327717?v=4"
        }
      ],
      "contributors_sampled": 11,
      "top_contributor_share": 0.393
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "validate-code.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".php-cs-fixer.dist.php",
        "phpcs.xml",
        "phpstan.neon"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 4,
            "reason": "10 out of 25 merged PRs checked by a CI test -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 4,
            "reason": "Found 7/15 approved changesets -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "afa62007cca768bd1ecbc0e8ed347c675c239410",
        "ran_at": "2026-07-22T17:42:56Z",
        "aggregate_score": 5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-05-05T02:36:38Z",
      "oldest_open_prs": [
        {
          "number": 203,
          "created_at": "2026-01-23T22:10:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 210,
          "created_at": "2026-02-10T01:42:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-01-29T13:38:57Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/composer-unused/symbol-parser",
    "host": "github.com",
    "name": "symbol-parser",
    "owner": "composer-unused"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 50,
        "vitality": 46,
        "community": 63,
        "governance": 71,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 46,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "commits_last_year": 10,
              "human_commit_share": 0.59,
              "days_since_last_push": 162,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 162 days ago",
                "points": 9.9,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 162
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "10 commits in the last year",
                "points": 9.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 82,
            "inputs": {
              "releases_count": 27,
              "latest_release_tag": "0.3.3",
              "releases_from_tags": false,
              "days_since_latest_release": 174,
              "mean_days_between_releases": 76.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "27 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 174 days ago",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 174
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~76.9 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 76.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 174,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 174 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 174
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 63,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "forks": 13,
              "stars": 15,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "15 stars",
                "points": 18.6,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "13 forks",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "good",
            "name": "Ecosystem adoption (downloads)",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "packages": [
                "composer-unused/symbol-parser"
              ],
              "dependents": 2,
              "ecosystems": "packagist",
              "total_downloads": 6896561,
              "monthly_downloads": 381273
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "381,273 downloads/month across packagist",
                "points": 74.4,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 381273,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "2 packages depend on it",
                "points": 3.2,
                "status": "partial",
                "details": [
                  {
                    "code": "registry_dependents",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 71,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 11,
              "top_contributor_share": 0.393
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 39% of commits",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 39
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "11 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "merged_prs": 125,
              "open_issues": 0,
              "closed_issues": 14,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 63
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "125/188 decided PRs merged",
                "points": 25.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 125,
                      "decided": 188
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 7/15 approved changesets -- score normalized to 4",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "followers": 5,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "composer-unused",
              "public_repos": 4,
              "account_age_days": 2426
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "5 followers of composer-unused",
                "points": 5.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 5,
                      "login": "composer-unused"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "4 public repos, account ~6 yr old",
                "points": 17.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 4
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "composer-unused/symbol-parser"
              ],
              "ecosystems": "packagist",
              "any_deprecated": false,
              "min_days_since_publish": 174
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on packagist",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 174 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 174
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "27 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".php-cs-fixer.dist.php, phpcs.xml, phpstan.neon",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".php-cs-fixer.dist.php, phpcs.xml, phpstan.neon"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "10 out of 25 merged PRs checked by a CI test -- score normalized to 4",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [
                "php",
                "composer",
                "hacktoberfest",
                "php-parser",
                "test"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 12,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 6,
              "scorecard_aggregate": 5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "10 out of 25 merged PRs checked by a CI test -- score normalized to 4",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 7/15 approved changesets -- score normalized to 4",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 26
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 54,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.407,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "24 of 59 human commits state their intent (structured subject or explanatory body)",
                "points": 21.7,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 24,
                      "sampled": 59
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 77,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.4
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".php-cs-fixer.dist.php, phpcs.xml, phpstan.neon",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".php-cs-fixer.dist.php, phpcs.xml, phpstan.neon"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "40 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 40,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "PHP",
              "largest_source_bytes": 6673,
              "source_files_sampled": 110,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "PHP without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "PHP"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/110 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 110,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T17:43:17.305514Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/composer-unused/symbol-parser.svg",
  "full_name": "composer-unused/symbol-parser",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsPackagist.