sirbrillig/phpcs-changed holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (66/100) and lowest on Security (37/100). It was last updated today. A single contributor accounts for most of its recent work.
59
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
59
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Type-checkable code — PHP without a type-check config
55/55
Manageable file sizes — 0/54 source files over 60KB
Inputs used
primary_language
PHP
largest_source_bytes
42,032
source_files_sampled
54
oversized_source_files
0
Key facts
38GitHub stars
10contributors
8commits, last 12 months
0days since last push
46releases
1bus factor
3open issues
Packagistpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 12 ⇿
0Stars
12Forks
34Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 9Patch 14
Each point covers 5 days.
OpenSSF Scorecard 3.6 / 10
3.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-01 20:14 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 6 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Packagist
dealerdirect/phpcodesniffer-composer-installer
—
indirect
Packagist
php
—
indirect
Packagist
phpunit/phpunit
—
indirect
Packagist
sirbrillig/phpcs-variable-analysis
—
indirect
Packagist
squizlabs/php_codesniffer
—
indirect
Packagist
vimeo/psalm
—
indirect
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"phpcs",
"svn",
"cli",
"php",
"linting"
],
"is_fork": false,
"size_kb": 497,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 285688,
"Shell": 7119
},
"pushed_at": "2026-08-01T20:10:46Z",
"created_at": "2018-11-14T21:49:23Z",
"owner_type": "User",
"updated_at": "2026-05-24T21:54:57Z",
"description": "🐘 Run phpcs on files and only report new warnings/errors compared to the previous version.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "trunk",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "http://foolord.com/",
"name": "Payton Swick",
"type": "User",
"login": "sirbrillig",
"company": null,
"location": "Burlington, VT",
"followers": 706,
"avatar_url": "https://avatars.githubusercontent.com/u/2036909?v=4",
"created_at": "2012-07-24T22:40:05Z",
"is_verified": null,
"public_repos": 137,
"account_age_days": 5120
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.13.0",
"kind": "minor",
"published_at": "2026-04-26T18:05:56Z"
},
{
"tag": "v2.12.0",
"kind": "minor",
"published_at": "2025-11-08T22:29:22Z"
},
{
"tag": "v2.11.8",
"kind": "patch",
"published_at": "2025-03-11T15:24:38Z"
},
{
"tag": "v2.11.7",
"kind": "patch",
"published_at": "2025-01-14T18:37:04Z"
},
{
"tag": "v2.11.6",
"kind": "patch",
"published_at": "2024-12-15T17:24:38Z"
},
{
"tag": "v2.11.5",
"kind": "patch",
"published_at": "2024-05-23T20:02:35Z"
},
{
"tag": "v2.11.4",
"kind": "patch",
"published_at": "2023-09-29T21:28:43Z"
},
{
"tag": "v2.11.3",
"kind": "patch",
"published_at": "2023-08-24T23:27:48Z"
},
{
"tag": "v2.11.2",
"kind": "patch",
"published_at": "2023-08-21T15:09:02Z"
},
{
"tag": "v2.11.1",
"kind": "patch",
"published_at": "2023-06-16T02:33:02Z"
},
{
"tag": "v2.11.0",
"kind": "minor",
"published_at": "2023-06-15T19:56:36Z"
},
{
"tag": "v2.11.0-beta.2",
"kind": "prerelease",
"published_at": "2023-06-06T13:57:15Z"
},
{
"tag": "v2.11.0-beta.1",
"kind": "prerelease",
"published_at": "2023-05-29T15:26:08Z"
},
{
"tag": "v2.10.2",
"kind": "patch",
"published_at": "2023-03-25T15:11:53Z"
},
{
"tag": "v2.10.1",
"kind": "patch",
"published_at": "2023-01-25T17:09:14Z"
},
{
"tag": "v2.10.0",
"kind": "minor",
"published_at": "2022-03-09T18:18:10Z"
},
{
"tag": "v2.10.0-beta.1",
"kind": "prerelease",
"published_at": "2022-02-15T00:27:09Z"
},
{
"tag": "v2.9.0",
"kind": "minor",
"published_at": "2022-02-01T18:07:10Z"
},
{
"tag": "v2.8.1",
"kind": "patch",
"published_at": "2021-03-22T22:57:40Z"
},
{
"tag": "v2.8.0",
"kind": "minor",
"published_at": "2021-03-15T19:31:20Z"
},
{
"tag": "v2.8.0-beta.2",
"kind": "prerelease",
"published_at": "2021-03-11T20:40:16Z"
},
{
"tag": "v2.8.0-beta.1",
"kind": "prerelease",
"published_at": "2021-03-09T23:54:17Z"
},
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2021-02-16T15:50:51Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2021-01-29T17:27:08Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2021-01-04T18:45:10Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2020-06-24T15:37:53Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2020-06-22T16:42:53Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2020-04-16T14:56:10Z"
},
{
"tag": "v2.4.0-beta-3",
"kind": "prerelease",
"published_at": "2020-04-15T17:02:42Z"
},
{
"tag": "v2.4.0-beta-2",
"kind": "prerelease",
"published_at": "2020-04-15T16:27:18Z"
},
{
"tag": "v2.4.0-beta-1",
"kind": "prerelease",
"published_at": "2020-04-15T16:01:22Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2020-04-14T23:29:36Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2020-04-14T22:21:51Z"
},
{
"tag": "v2.3.0-beta-1",
"kind": "prerelease",
"published_at": "2020-04-14T22:04:36Z"
},
{
"tag": "v2.2.7",
"kind": "patch",
"published_at": "2019-11-21T17:10:50Z"
},
{
"tag": "2.2.7-beta-2",
"kind": "prerelease",
"published_at": "2019-11-14T18:05:26Z"
},
{
"tag": "2.2.7-beta-1",
"kind": "prerelease",
"published_at": "2019-10-29T16:29:19Z"
},
{
"tag": "v2.2.6",
"kind": "patch",
"published_at": "2019-08-07T20:00:45Z"
},
{
"tag": "v2.2.3",
"kind": "patch",
"published_at": "2019-08-05T20:49:26Z"
},
{
"tag": "v2.2.2",
"kind": "patch",
"published_at": "2019-08-04T00:26:08Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2019-06-25T14:29:01Z"
},
{
"tag": "v2.2.0-beta.1",
"kind": "prerelease",
"published_at": "2019-06-12T16:17:20Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2019-02-28T23:23:20Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2019-01-04T18:45:35Z"
},
{
"tag": "v2.0",
"kind": "other",
"published_at": "2018-11-27T05:33:17Z"
},
{
"tag": "v1.0",
"kind": "other",
"published_at": "2018-11-19T21:17:47Z"
}
],
"recent_commits": [
{
"oid": "8f11cc8991d98985f5e0aadb37b4b7c01048eb0d",
"body": "…rk.sh (#116)\n\n* Support single-file sizing and multiple candidate branches in benchmark.sh\n\nAdds LINES_PER_FILE to size each generated file, and CANDIDATES to compare\nmultiple branches against trunk in one hyperfine run. Worktrees are now\ncreated with --detach so trunk can be benchmarked even when \n[…]\neach iteration so the modified-side cache misses while\nthe unmodified-side cache (keyed on git revision) still hits. Each\nbenchmark also clears the cache via hyperfine --setup so branches start\nfresh.",
"is_bot": false,
"headline": "Support single-file sizing and multiple candidate branches in benchma…",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2026-05-24T21:54:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a369fce181a5064b6150708c3b0a1045c518a248",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.13.0",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2026-04-26T18:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e33de21cc856f5d9d6cc9e8294a4ebadd0f0e93",
"body": "…(#113)",
"is_bot": false,
"headline": "Fix benchmark script to be generic and not specific to batch process …",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2026-04-21T03:39:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d45e831a6b5923b19c811481ad230a15c4aea940",
"body": "* Add WindowsShell for native Windows support without WSL\n\nIntroduces WindowsShell (extending UnixShell) that overrides the\nUnix-specific idioms so phpcs-changed works natively on Windows\ncmd.exe without requiring WSL:\n\n- Uses 'type' built-in instead of 'cat' for reading local files\n- Uses 'NUL' ins\n[…]\npcs.bat' was parsed as command 'vendor' with flag\n'/bin/phpcs.bat'. Using 'vendor\\bin\\phpcs.bat' makes the path\nunambiguous to cmd.exe.\n\n* Add Unix integration test workflow mirroring test-windows.yml",
"is_bot": false,
"headline": "Add WindowsShell for native Windows support without WSL (#112)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2026-04-21T03:15:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5d8446a46ea1368462cdacd762ef328a5a042f2",
"body": "benchmark.sh uses hyperfine to measure wall-clock time of\nphpcs-changed --git-staged across a set of staged PHP files,\ncomparing the current branch against trunk via a git worktree.\n\nBENCHMARKING.md explains prerequisites, usage, tunable parameters,\nhow the test environment is constructed, and how to interpret results.\n\n.gitignore updated to exclude the worktree checkout (.bench-trunk/)\nand the hyperfine results export (benchmark-results.md).",
"is_bot": false,
"headline": "Add benchmark script for comparing phpcs invocation strategies (#111)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2026-04-20T23:25:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c9f6b2972166f0d5e2135fd3549c973aaecc099",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.12.0",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-11-08T22:27:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c611ba603ac2d84ac98e02372c940b8869296e7",
"body": null,
"is_bot": false,
"headline": "Add Checkstyle XML reporter format (#108)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-11-08T22:26:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2900b8ba48fdede20740ca0c46de3cfe2d1e7594",
"body": "* Add Junit reporter\n\n* Update dev depdendencies\n\n* Fix type errors\n\n* Update CI to use 3.x-dev instead of dev-master for PHPCS\n\n* Add time attribute to JUnit XML output\n\n* Add PHPDoc property comments to LintMessage",
"is_bot": false,
"headline": "Add Junit reporter (#107)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-11-08T21:50:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "112557a73988b1adbda40dad2963420947280c3c",
"body": null,
"is_bot": false,
"headline": "Fix code examples in README",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-06-07T23:05:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c6deb684d648b4d75c577bead4c6d43dc46e4ab",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.8",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-03-11T15:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f0c7e2eca51347c8f58e7587262ca86ea120133",
"body": "…g (#105)",
"is_bot": false,
"headline": "Git Workflow: do not use just the filename, but full path in reportin…",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2025-03-11T15:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71ac60966beb5969f346f4a5defeb2ba025c712e",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.7",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-01-14T18:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e8195f21b6730595bca4d5890d0785ceccdb8ea",
"body": "* Update composer.json to use tabs\r\n\r\n* Update require for composer-installer to allow 1.0",
"is_bot": false,
"headline": "Update require for phpcodesniffer-composer-installer to allow 1.0 (#103)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2025-01-14T17:29:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "284c394d7c5fd292a8876be6edb18781c28d612a",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.6",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2024-12-15T17:22:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84ab03584a44f6abdf453a3113d5e40903d7ca89",
"body": null,
"is_bot": false,
"headline": "Fix PHP 8.4 deprecation warnings (#102)",
"author_name": "Tom Arbesser",
"author_login": "TomA-R",
"committed_at": "2024-12-13T15:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aaa144eb4f14697b6b06e3dcf74081b5a02f85f6",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.5 (#101)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2024-05-23T20:01:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7be9f99523e26f42a955848cfbd3a919ac22355b",
"body": "* Replace empty() calls in CliOptions\r\n\r\nSince `empty()` works on null undefined without a warning, it also hides\r\nbugs from static analysis (causing the bug in\r\nhttps://github.com/sirbrillig/phpcs-changed/pull/99). This change should\r\nhave the same effect while not ignoring warnings.\r\n\r\n* Replace `\n[…]\nreaks for preg_match to debug which condition is a problem\r\n\r\npsalm reports `RiskyTruthyFalsyComparison` for this line but I can't\r\nfigure out why.\r\n\r\n* Replace `empty()` in UnixShell->getPhpcsVersion",
"is_bot": false,
"headline": "Replace `empty()` and some `isset()` calls (#100)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2024-05-23T19:55:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3811a963017a3388677be7e96dc915e3d732cf7c",
"body": "After moving the option to `CliOptions` in commit d7eb1168f5d4054, the field `diff` was renamed to `diffFile`, which caused a bug in the handler for the `--diff` argument.",
"is_bot": false,
"headline": "Fixed typo when checking if the field `diffFile` is empty. (#99)",
"author_name": "Dmitriy Konstantinov",
"author_login": "dmitr1y",
"committed_at": "2024-05-23T16:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acc946731ec65053e49cb0d3185c8ffe74895f93",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.4 (#98)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-09-29T21:27:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80840f692c88da6825942021fbce32aad6519bfe",
"body": "* Do not use an optional parameter in LintMessage's constructor\r\n\r\nUsing optional parameters before required parameters is deprecated since PHP 8.0 -- https://www.php.net/manual/en/migration80.deprecated.php\r\n\r\nRemoving the default value has no effect.\r\n\r\n* Update the parameter type for `$file`\r\n\r\nIt might also be `null`",
"is_bot": false,
"headline": "Do not use an optional parameter in LintMessage's constructor (#97)",
"author_name": "Alex Concha",
"author_login": "xknown",
"committed_at": "2023-09-29T18:33:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fc94ed9adee571b7e30da4467b1d41073a9dd1c",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.3 (#96)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-08-24T23:27:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e31c0adfa26fc616a3230c7e30d152c726b62172",
"body": "* Change fileHasValidExtension to accept extensions instead of options\r\n\r\n* Create info mode so that -i option works",
"is_bot": false,
"headline": "Do not try to validate runtime options when loading bin script (#95)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-08-24T23:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03492be0d8ef076c6ca5189312ee39eb36767442",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.2 (#93)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-08-21T15:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8af0f191a9708b53d4b703ba614f2c58a41038ab",
"body": "* Update tests to set bool options with false like getopt\r\n\r\n* Fix no-vendor-phpcs",
"is_bot": false,
"headline": "Fix no-vendor-phpcs flag (#92)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-08-21T15:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebff6bebc105b674f671bb79e3a50c6a24bc0bb7",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.1 (#91)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-06-16T02:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3cf13aa3b0307ede3e7bc0917f310bb21abdfbf",
"body": "* Add tests for untracked files\r\n\r\n* Allow empty git status for tracked, unchanged files",
"is_bot": false,
"headline": "Fix git status check for unchanged tracked file (#90)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-06-16T02:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6bf0cc6f9d9cf6489d5528d3d85f1edc4da7424",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.0 (#88)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-06-15T19:54:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00c7070765eea7ac49e20d314f5a74030ab2ad56",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.0-beta.2 (#87)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-06-06T13:57:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7027b1f7c48effb289943990e90fcdc9a6e812d1",
"body": "…(#86)\n\n* Pass PHPCS 'extensions' option\r\n\r\n* Add dot at end of help line\r\n\r\n* Use 'extensions' option in 'fileHasValidExtension'\r\n\r\n* Use CliOptions instead of general options, update README",
"is_bot": false,
"headline": "Add '--extensions' option to use in PHPCS and for allowed extensions …",
"author_name": "Fermín Cirella",
"author_login": "LetrixZ",
"committed_at": "2023-06-06T13:43:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65a2674dbcf10ca9476a6aee38ccf528b9fdb687",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.11.0-beta.1 (#85)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-29T15:08:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4506b8fbed56a13ae8f7a6f8b11e882cdad30e49",
"body": "* Pass ShellOperator to printInstalledCodingStandards from cli\r\n\r\n* Modify XmlReporter to use ShellOperator for phpcs version\r\n\r\n* Remove executeCommand from ShellOperator\r\n\r\n* Remove validateExecutableExists from ShellOperator\r\n\r\nReplacing it with a general validateExecutables function.\r\n\r\n* Rename validateExecutables to validateShellIsReady",
"is_bot": false,
"headline": "Remove shell execute and validate executable commands (#84)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-27T15:54:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2731ba7f17a435d79baff3bac99ddb79c8418e52",
"body": "The file that had the namespace was not in a directory with that\r\nnamespace.",
"is_bot": false,
"headline": "Remove the PhpcsChanged\\Cli namespace (#83)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-27T15:15:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b52af16f5829b791b3f1d7fdf9a26820716aaf8a",
"body": "* Add getPhpcsOutput commands to ShellOperator for svn\r\n\r\n* Add getPhpcsOuput commands to UnixShell for svn\r\n\r\n* Update UnixShell git commands to use new phpcs helpers\r\n\r\n* Refactor svn workflow to use shell for svn phpcs output\r\n\r\n* Add svn revision ID and unmodified check for svn to ShellOperator\r\n[…]\niedDiff to ShellOperator\r\n\r\n* iAdd getSvnUnifiedDiff to UnixShell\r\n\r\n* Change svn workflow to use getSvnUnifiedDiff from shell\r\n\r\n* Add cache for `svn info`\r\n\r\n* Clear shell caches after each workflow",
"is_bot": false,
"headline": "Move svn workflow to shell (#82)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-27T15:13:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "af03c891feef9127e00e06c154b00c56fafc340c",
"body": "* Use vendor/bin/phpcs if it exists and phpcs not overridden\r\n\r\n* Require explicitly setting executables in TestShell\r\n\r\n* Register test executables in GitWorkflowTest\r\n\r\n* Register exeutables for SvnWorkflowTest\r\n\r\n* Move getPhpcsExecutable to Cli for reuse\r\n\r\n* Add tests for vendor default phpcs\r\n\r\n* Add no-vendor-phpcs option\r\n\r\n* Document no-vendor-phpcs in help and README\r\n\r\n* Add no-vendor-phpcs test for svn mode",
"is_bot": false,
"headline": "Auto-detect phpcs in vendor directory (#81)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-20T20:24:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e2592823b6a171d7a1e80a34d71ac39e4f013c5",
"body": "* Add phpcs-path option\r\n\r\n* Update SvnWorkflowTest to use CliOptions\r\n\r\n* Call setOptions for SvnWorkflowTest\r\n\r\n* Add getExecutablePath for git\r\n\r\nThis commit could be broken up. It also does the following things:\r\n\r\n- Move the `phpcs -i` command to ShellOperator.\r\n- Update a few other places that\n[…]\nr git-path\r\n\r\n* Add test for phpcs-path\r\n\r\n* Remove cat requirement for git mode\r\n\r\n* Add tests for svn-path and cat-path\r\n\r\n* Add tests for phpcs-path for svn\r\n\r\n* Improve git tests for phpcs command",
"is_bot": false,
"headline": "Add executable paths to options (#79)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-20T19:26:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c82a2b26ef7102d331005e5164359954cf70f233",
"body": "* Move getGitMergeBase to ShellOperator\r\n\r\n* Remove unused GitWorkflow file",
"is_bot": false,
"headline": "Move git merge base to shell (#77)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-07T00:42:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ce097f65fef2ec2b6e41db55f6604f2257f2a71",
"body": "* Move getting unified git diff to shell\r\n\r\n* Remove unused git bin assignment in runGitWorkflowForFile\r\n\r\n* Fix stagedOption in TestShell",
"is_bot": false,
"headline": "Move getting unified git diff to shell (#76)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-07T00:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2667502bfd238ab6f5e38403eb6351bf6510f40",
"body": "* Move hash, phpcs, git root, and path comamnds to ShellOperator\r\n\r\n* Use Modes constants for assigning mode option\r\n\r\n* Fix syntax error in UnixShell\r\n\r\n* Fix Modes import\r\n\r\n* Copy git commands to TestShell\r\n\r\n* Add doesUnmodifiedFileExistInGit to ShellOperator\r\n\r\n* Update GitWorkflowTest to rely \n[…]\noot/getGitRootDirectory\r\n\r\n* Remove validateGitFileExists\r\n\r\n* Restore functionality of noVerifyGitFile\r\n\r\n* Restore isReadable check in git flow\r\n\r\n* Use array_key_exists to test for cached full path",
"is_bot": false,
"headline": "Move hash, phpcs, and root git commands to ShellOperator (#75)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-07T00:16:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b391fd2d148c5cc58be027c83c32aedb2c0706de",
"body": "* Change runGitWorkflowForFile to use CliOptions\r\n\r\n* Add doesFileExistInGit to ShellOperator/UnixShell\r\n\r\n* Pass options to UnixShell\r\n\r\n* Update validateGitFileExists to use ShellOperator->doesFileExistInGit\r\n\r\n* Add doesFileExistInGit to TestShell\r\n\r\n* Remove __construct from ShellOperator\r\n\r\n* Add rev-parse mock to GitWorkflowTest where missing\r\n\r\n* Add options to XmlReporter\r\n\r\n* Save options directly inside UnixShell\r\n\r\n* Remove duplicate isReadable check in UnixShell",
"is_bot": false,
"headline": "Move git file existence check to ShellOperator (#74)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-05-06T16:07:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc74845eaccd9e807d865478c575ac4d5fd1cd08",
"body": "* Make sure warningSeverity/errorSeverity are set even if 0\r\n\r\n* Update runGitWorkflow to use CliOptions",
"is_bot": false,
"headline": "Update runGitWorkflow to use CliOptions (#72)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-04-29T23:17:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7eb1168f5d4054748a921f0457e61000df271b5",
"body": "* Use CliOptions in main executable\r\n\r\n* Add CliOptions class\r\n\r\n* Fix reporter option\r\n\r\n* Use reporter option in executable\r\n\r\n* Mention XML report mode in the README\r\n\r\n* Add files to CliOptions->toArray\r\n\r\n* Remove duplicate debug in CliOptions->toArray\r\n\r\n* Use $options->files for file list in \n[…]\nd even more guards to shouldIgnorePath calls\r\n\r\n* Remove unnecessary uninstall command in workflow\r\n\r\n* Update README to mention static-analysis command\r\n\r\n* Add psalm config and remove phpstan config",
"is_bot": false,
"headline": "Add options class, take 2 (#71)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-04-29T22:39:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba0432bc86ffdc31a6946117be6c2419b7e3e16d",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.10.2",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-03-25T15:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a6a6eee45b630631da8407153eb4c51d027a664",
"body": "* Add helper function to generate full git path command\r\n\r\n* Use full path for git cat-file command",
"is_bot": false,
"headline": "Use full path command for git cat-file command (#67)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-03-25T15:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5c3be6ec84395b168e7deadf8b167e50449e7a3",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.10.1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-01-25T17:08:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b70d5e78589f75ba510ecc79cdb7e34b7949cb82",
"body": null,
"is_bot": false,
"headline": "Add explicit properties to GitWorkflowTest/SvnWorkflowTest (#65)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2023-01-25T17:07:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1042ec7026bc49541254cedf69c55294abd54c11",
"body": null,
"is_bot": false,
"headline": "Replace JS-style var interpolation with PHP-style (#63)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-12-14T17:09:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee96d0ac50a1e15e5b18de68d125cd5d96693579",
"body": "* Add test workflow\r\n\r\n* Add lint/static analysis workflows\r\n\r\n* Remove circle config",
"is_bot": false,
"headline": "Switch to GitHub Actions for CI (#61)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-06-24T22:50:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4106b775b4a8e99005d1399b5d0a1eb7b05856a5",
"body": null,
"is_bot": false,
"headline": "Add debug option to README (#60)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-06-24T22:28:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca5d2784fa086f660db4df8807a32a1b5d42284d",
"body": "* Fix types of some properties on DiffLine\r\n\r\n* Add types to json_decode results\r\n\r\n* Remove accidental null coalesce\r\n\r\n* Update phpstan to 1.7\r\n\r\n* Add return type for noopDebug\r\n\r\n* Add more type annotations\r\n\r\n* Remove fallback fileName assignments as they cannot be null\r\n\r\n* Explicitly cast pat\n[…]\nphp 8 circle\r\n\r\n* Remove composer lint from php 8 because ImportDetection will not exist\r\n\r\n* Downgrade phpstan to 1.4.10 for php 7.1\r\n\r\n* Use only a single composer config\r\n\r\n* Remove ImportDetection",
"is_bot": false,
"headline": "Improve developer static analysis (#59)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-06-24T22:24:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba049e6f7da40d64056f7b6c4078e87f0f292d6b",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.10",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-03-09T18:16:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abc539cf5f6a6a0ad1bbc5a4aa0cb793658ad249",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.10.0-beta.1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-02-15T00:25:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b131d301bf2d5ae9721b8855094e3358508fb9",
"body": "* First pass at passing in error and warning severity to phpcs\r\n\r\nPassing in the `--warning-severity` and `--error-severity` flags to phpcs is rather straightforward, however we need to take into consideration the caching layer.\r\n\r\nIt currently uses the standard as a cache key, and it definitelly sh\n[…]\nand error with `e`.\r\n\r\nFor instance: `VIP:w6e2`.\r\n\r\n* Fix typo in CacheManagerTest class name.\r\n\r\nCo-authored-by: Payton Swick <payton@foolord.com>\r\n\r\nCo-authored-by: Payton Swick <payton@foolord.com>",
"is_bot": false,
"headline": "First pass at passing in error and warning severity to phpcs (#57)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2022-02-14T20:39:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc8176a87c54e531e6db00a0cf42a712e8d679ec",
"body": "… (#50)\n\nWhen no `--cache` flag is provided, we don't need to print any output on whether a cached info for a file was found or not. It should improve the readability of the debug output.",
"is_bot": false,
"headline": "Move the debug info on (not)using cache behind isCachingEnabled check…",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2022-02-10T17:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54c5016e966bd26be00172d7ff44e33d21c443ea",
"body": "* Use previous > changed terms in variables for old > new file\r\n\r\n* Update variable terminology in GitWorkflow\r\n\r\n* Update variable terminology in SvnWorkflow\r\n\r\n* Update variable terminology in misc. other places\r\n\r\n* Update function name terminology\r\n\r\n* Update variable terminology in bin script\r\n\n[…]\nfied\r\n\r\n* Remove \"file version\" term\r\n\r\n* Use \"modified\" term in Cli doc I missed\r\n\r\n* Use \"modified\" term in Cli for variables I missed\r\n\r\n* Fix typo\r\n\r\n* Update a few docs that still use older terms",
"is_bot": false,
"headline": "Use \"unmodified\" > \"modified\" terms (#55)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-02-10T17:00:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7dfd2554a66a24b6669f8c148c749116959dc19a",
"body": "* Do not git diff if new file has no messages\r\n\r\n* Throw NoChangesException if no messages exist for new git file\r\n\r\n* Change isNewGitFileLocal to return false for non-new files\r\n\r\n* Allow checking for git root in unchanged file with messages test\r\n\r\n* Disallow running git diff in unchanged file wit\n[…]\n avoid diff and hash for unchanged updated file\r\n\r\n* Make new/old svn cache tests more explicit\r\n\r\n* Prevent getting svn file info if updated file has no messages\r\n\r\n* Restore logging of new file skip",
"is_bot": false,
"headline": "Do not fetch file diff if updated file has no messages (#54)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-02-08T16:06:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "911f83d900dd894951d3a55421cee4539147169d",
"body": "… (#51)\n\n* Only run orig file PHPCS linting when the new version has lint issues\r\n\r\nWhen there are no linting issues reported by PHPCS in the new file, there is no point in checking the orig verion, since we would not report any issues anyway.\r\n\r\nThis should speed up the phpcs-changed for files w/o \n[…]\nrig file when there are no lint messages from new one, we should not register the `svn cat` command, but instead check that it was not called, which means that the new functionality works as expected.",
"is_bot": false,
"headline": "Only run orig file PHPCS linting when the new version has lint issues…",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2022-02-04T15:51:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "895fbdc62432576a84331d26cbe43978e149d9d2",
"body": "…lag (#52)\n\n* Always return 0 from reportMessagesAndExit when run with --arc-lint flag\r\n\r\nWhen using futures in arcanist linter, the external lint program, eg.: phpcs-changed in this case, should always return 0 status, even if there are lint errors, otherwise the external program's run is considered being unsuccessful.\r\n\r\n* Replace the `--arc-lint` used for exiting with 0 for more general `--always-exit-zero` flag.",
"is_bot": false,
"headline": "Always return 0 from reportMessagesAndExit when run with --arc-lint f…",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2022-02-04T15:48:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc5ae2cce40055e87ad9d8037187797b62a6ada3",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.9.0",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2022-02-01T18:05:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6206058398fa4f68f8a901a3618e789539cf4cd",
"body": "* Check on whether the command is run from git root\r\n\r\nInstead of bluntly using the `git ls-files --full-name` every time `git\r\nshow` is called, we can check on whether the PhpcsChanges is run from\r\ngit's root and if so, we can use the passed in file name w/o additional\r\ncheck which should save som\n[…]\ne.\r\n\r\nCo-authored-by: Payton Swick <payton@foolord.com>\r\n\r\n* Remove unintentionally introduced newline.\r\n\r\n* Add the `--arc-lint` option to README.\r\n\r\nCo-authored-by: Payton Swick <payton@foolord.com>",
"is_bot": false,
"headline": "Add arc-lint option and improve some git performance (#49)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2022-02-01T18:02:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3ea83778ca227bcab9f393d32cb843e05cf1a682",
"body": "* Add LintMessage and LintMessages\r\n\r\n* Remove PhpcsMessage\r\n\r\n* Change PhpcsMessages to a class of pure functions\r\n\r\n* Add LintMessage/s and remove PhpcsMessage from main file\r\n\r\n* Move getNewMessages into LintMessages\r\n\r\n* Remove unused symbol imports\r\n\r\n* Replace remaining instance of LintMessage\n[…]\nt reporters to use LintMessage\r\n\r\n* Remove incorrect phpdoc on LintMessages constructor\r\n\r\n* Cast fixable property in array_filter\r\n\r\n* Add getFixable to LintMessage\r\n\r\n* Use getFixable in XmlReporter",
"is_bot": false,
"headline": "Experiment: extract and generalize lint diffing system (#47)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-12-18T17:47:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86b45aab347b560a1594cee22d16f977ca88b2e0",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.8.1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-22T22:57:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c89ab3d9d0d27f0a93862ee15fd5a90034eae4b8",
"body": "* Use last changed revision for svn files rather than repo revision\r\n\r\n* Use file revision for old file cache hash of svn files\r\n\r\n* Remove revisionId from caches\r\n\r\n* Update tests to use revision Id for svn file hashes",
"is_bot": false,
"headline": "Cache svn previous file by last changed version (#46)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-22T22:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d67c70f6ded0ff242f573bf9d84e1467c0330594",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.8.0",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-15T19:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5b56350de22061f07c4221da050ccbcf2ec9bb5",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.8.0-beta.2",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-11T20:39:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "982154188a782033738633dab5a68cd539b6eaab",
"body": "* Add CacheObject as a value object for the cache data\r\n\r\n* Refactor CacheInterface so that it deals only with CacheObject",
"is_bot": false,
"headline": "Refactor CacheInterface so that it deals only with a value object (#45)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-11T20:38:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "249e9eed9bfdcfd9e636e9ce6fccf47db34f1e95",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.8.0-beta.1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-09T23:52:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce426ea2192a9e7b1a47c085f92a15c6f622a5f1",
"body": null,
"is_bot": false,
"headline": "Add caching of phpcs results (#44)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-03-09T23:50:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c521b6a303fb1c721949c7e4bdc0f3bbd7e5125f",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.7.1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-02-16T15:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5bc4ae1b93f16e6fa26fc1b1f6067c78a36fdc8",
"body": "When `--git-base` is used, we use `git diff $BASE...` to fetch the diff,\r\nwhich will diff against the merge-base of $BASE and HEAD rather than\r\nagainst $BASE itself.\r\n\r\nWhen we run phpcs for the old file versions, we run it against the\r\nversion from $BASE itself rather than the merge-base version.\r\n\n[…]\nrectly reported.\r\n\r\nThis PR adds an initial step that replaces the passed --git-base with\r\nthe merge-base commit hash so later steps use the correct file versions.\r\n\r\nFixes sirbrillig/phpcs-changed#42",
"is_bot": false,
"headline": "Fetch correct old file versions (#43)",
"author_name": "Brad Jorsch",
"author_login": "anomiex",
"committed_at": "2021-02-09T20:35:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3a29de78291cf1ec71b23fd4553a968c13620519",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.7",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-01-29T17:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e1f68eef71defd465e98d641288bb125d7ec191",
"body": "Introduces `--git-base`, which is accidentally compatible with the\r\ncurrent `--git-branch` implementation. Merge them as to make the behavior\r\nofficial\r\n\r\nCo-authored-by: Flavio Zavan <flavio.zavan@automattic.com>",
"is_bot": false,
"headline": "Add git-base option (#41)",
"author_name": "Flavio Zavan",
"author_login": "flaviozavan",
"committed_at": "2021-01-29T17:24:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45c6dcd64da45c2e54e173791f7a91737db106f2",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.6",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2021-01-04T18:43:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f07b4319881371bdc10f5fc3768e6afdf4e2a6a",
"body": "* Clean up testFullGitWorkflowForOneFileUnstaged\r\n\r\nThe phpcs output in the test was not quite accurate.\r\n\r\n* Fix mock output for testFullGitWorkflowForMultipleFiles\r\n\r\nIt was incorrectly comparing the HEAD version to the working copy, even\r\nthough the git-staged mode compares the staged version to the working\r\ncopy.\r\n\r\n* Fix other git tests to use staged/HEAD version as base\r\n\r\n* Fix more git tests\r\n\r\n* Use different commands for new files based on git mode",
"is_bot": false,
"headline": "Use different commands for new files based on git mode (#39)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-12-30T02:12:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e59abd9ebc2b7fed2bcff724cb8c503757abeaa",
"body": "* Update dependencies for php8\r\n\r\n* Update php requirement to allow 8\r\n\r\n* Remove LimeDeck printer from phpunit config\r\n\r\n* Add php 7.4 to CI\r\n\r\n* Add php 8 to CI\r\n\r\n* Add separate composer config for php 8\r\n\r\nThis version does not include deps or scripts for linting.\r\n\r\n* Disable phpcs for copied c\n[…]\nine in XmlReporter\r\n\r\n* Disable checking iterable type in phpstan\r\n\r\n* Add types to Cli helper functions\r\n\r\n* Throw if getReporter fails and we do not exit\r\n\r\n* Add phpdoc types to DiffLine properties",
"is_bot": false,
"headline": "Add php 8 support (#40)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-12-30T02:11:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a736d3d453e4263a1e6ef41cc646eac3904618f8",
"body": "* Add xml report format\r\n\r\n* Add -i option for compatibility with phpcs and returnb actual phpcs version in XML report type\r\n\r\n* Add unit tests and fix linting issue\r\n\r\n* Add missing files",
"is_bot": false,
"headline": "Add XML reporter (#38)",
"author_name": "Del Putnam",
"author_login": "delputnam",
"committed_at": "2020-12-29T23:44:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f95dcdd6fef5c69e9ac7b8ebdb2a03f7f4aaec27",
"body": "* Add the ignore option and tests\r\n\r\n* Fix phpstan feedback\r\n\r\nRemoves the backward compatibility for maintenance for patterns not having relative/absolute value, adds an early return in case there are no patterns\r\n\r\n* Revert the change of expected type. Back to string :)\r\n\r\n* Fix typo in variable\r\n\n[…]\nible to ever hit it in our implementation\r\n\r\n* Add a return type check for preg_split, as it can return `false`\r\n\r\n* Code style updates\r\n\r\n* Update the README.md\r\n\r\n* Add the `--ignore` option to help",
"is_bot": false,
"headline": "Add the ignore option and tests (#32)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2020-06-24T15:32:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb405e27b0515b31dfb2ed156cca221923a542cf",
"body": null,
"is_bot": false,
"headline": "Add git-branch option to help (#34)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-06-24T15:31:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b94851034cfcd670fa5dd1d46b495570a4d96d6",
"body": "* Use the +++ line from the diff for capturing the filename.\r\n\r\nIn case the interbranch git diff is used, the diff provided by git contains /dev/null instead of a real filename on the --- line when the file does not exist in the other branch.\r\n\r\nI don't think that there was any specific reason to use the --- filename, insteand of the +++.\r\n\r\n* Add unit tests, fix existing ones.",
"is_bot": false,
"headline": "Fix git filename detection (#33)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2020-06-24T15:27:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b12354e2ca96c28bf3583189e73a57d94ae976cd",
"body": null,
"is_bot": false,
"headline": "Version bump to 2.5",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-06-22T16:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "365b1d9fb54d4b42ae0cdc51a7d0e72f37f3c033",
"body": null,
"is_bot": false,
"headline": "Introduce TestShell to make new tests easier (#30)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2020-06-22T16:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "018c23c79199b362511cc18add70e213f2dc2db5",
"body": null,
"is_bot": false,
"headline": "Add git-branch option to README (#31)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-06-19T16:47:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0025630cf861769043a0d4729019537628918ca9",
"body": "* Allow more files extensions to be checked\r\n\r\nAdditional to .php files, let's allow also .inc, .css, and .js files. The logic is modeled accordingly to the phpcs logic in https://github.com/squizlabs/PHP_CodeSniffer/blob/2ecd8dc15364cdd6e5089e82ffef2b205c98c412/src/Filters/Filter.php#L163,L187\r\n\r\nf\n[…]\n\r\n\r\nThis changeset changes the fileHasValidExtension the way it returns false for a non file passed in as an argument.\r\n\r\n* Add unit tests for fileHasValidExtension function\r\n\r\n* Remove unused imports",
"is_bot": false,
"headline": "Allow more files extensions to be checked (#29)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2020-06-19T16:47:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f72cfa4b85d2e04bc6067462737f2b09d2d44eeb",
"body": "* Add support for remote branch diff in git workflow\r\n\r\nThis feature is meant for running the PHPCS in between two git branches, the current one and a specified one (using the new --git-branch param), taking advantage of the `git diff branch...` command, where `branch` is a remote branch (eg.: `mast\n[…]\neen two method declarations\r\n\r\n* Throw an exception on unknown command, rather than returning an empty string\r\n\r\n* Remove the var_dump from the debug executable\r\n\r\n* Remove var_dump used for debugging",
"is_bot": false,
"headline": "Add support for inter branch diffs (#28)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2020-06-19T16:39:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2313396feaf5ef16b3229045f27b752a814bdbb5",
"body": "The current implementation via glob ignores .php files in current dir in case `,` is passed as file list, and also ignores nested directories.\r\n\r\nTo fix the issue, this commit introduces a more solid implementation via `RecursiveDirectoryIterator` with appropriate filtering.",
"is_bot": false,
"headline": "Fix the filenames expasions (#24)",
"author_name": "David Biňovec",
"author_login": "david-binda",
"committed_at": "2020-06-02T22:34:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef63e225de330bdd928288e6c6bbcb79289202d5",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.4.0",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-16T14:54:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d601ebeca195d9e3647817aedb9c76a6535c5455",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.4.0-beta-3",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T17:00:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5f458eed47a30c2cb52944c9f1de347d800c972",
"body": null,
"is_bot": false,
"headline": "Clarify some automatic mode help text",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T16:59:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e14eccc5879afbd00ab9b9eb3a70f06722d6e8d8",
"body": null,
"is_bot": false,
"headline": "Improve layout of help text",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T16:26:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16605a82d7001de88d2bdd19bc9c8e81dce33668",
"body": null,
"is_bot": false,
"headline": "Correct git-unstaged help text",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T16:19:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d50389bdfa99debe80c384c968465aa36ab34a9",
"body": null,
"is_bot": false,
"headline": "Mark that git-staged is the default",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T16:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2f18f79cf67190e6604a8a7726b2e2655a78295",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.4.0-beta-1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T16:00:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d8427c37d87ad0f471f09fcd559447d4a4c4dfa",
"body": "* Add test for PhpcsMessages::merge\r\n\r\n* Add tests for FullReporter\r\n\r\n* Add tests for JsonReporter",
"is_bot": false,
"headline": "Add tests for reporters (#23)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T15:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70a67cf36767e2e0713f8aeaaeebe2b369c37e47",
"body": "* Change printError output to be more clear\r\n\r\n* Add instruction to run help in printErrorAndExit\r\n\r\n* Exit with 1 error code if help is printed for no options\r\n\r\n* Improve \"no files\" error message\r\n\r\n* Add error message for options but no files\r\n\r\n* Use Cli\\printError for UnixShell",
"is_bot": false,
"headline": "Improve error messaging (#22)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T15:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54876b0acb4175305325b1ff041f892dd75c831e",
"body": null,
"is_bot": false,
"headline": "Show help text if run with no options",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T14:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4960e9b6be22694a5378d57ec33cd5849e415819",
"body": null,
"is_bot": false,
"headline": "Update help text with new options (#21)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T00:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b232f02cbc9f5f8fdb09f84d8e1fd7db2799c72b",
"body": "* Pass options down to reporter\r\n\r\n* Display sniff code when -s option is enabled\r\n\r\n* Add -s option to README",
"is_bot": false,
"headline": "Add show sniff codes option (#20)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-15T00:00:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "200bae63cc1a7a1d3bf320fecb8603bf92752658",
"body": "* Make sure git mode works when not at root\r\n\r\n`git show HEAD:file/path` only works when the file path is absolute from\r\nthe git root. This change makes sure we always use the full path.\r\n\r\n* Update tests for new git show command\r\n\r\n* Add --git-staged and --git-unstaged options\r\n\r\n* Add test for runGitWorkflow with git-unstaged\r\n\r\n* Add --git-staged and --git-unstaged to README\r\n\r\n* Diff against staged changes if using --git-unstaged\r\n\r\n* Update git workflow test for unstaged comparison",
"is_bot": false,
"headline": "Improve git mode (#18)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-14T23:36:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3c5a9f5139c3abf407140d73d3f38eccc25d9af",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.3.1",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-14T23:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cdb2c6de9b5f183f5c92e3dd7dbdef02d5ee60e",
"body": null,
"is_bot": false,
"headline": "Make sure to only include one of each file in reporters (#19)",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-14T23:24:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3522fbceeebd44f262b1583b8691066da5b265a",
"body": null,
"is_bot": false,
"headline": "Bump version to 2.3",
"author_name": "Payton Swick",
"author_login": "sirbrillig",
"committed_at": "2020-04-14T22:20:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 46,
"commits_last_year": 8,
"latest_release_at": "2026-04-26T18:05:56Z",
"latest_release_tag": "v2.13.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 4,
"days_since_latest_release": 97,
"mean_days_between_releases": 116.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "sirbrillig/phpcs-changed",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/sirbrillig/phpcs-changed",
"is_deprecated": false,
"latest_version": "v2.13.0",
"repository_url": "https://github.com/sirbrillig/phpcs-changed",
"versions_count": 49,
"total_downloads": 4915918,
"dependents_count": 6,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 177901,
"first_published_at": null,
"latest_published_at": "2026-04-26T18:04:30Z",
"latest_version_yanked": null,
"days_since_latest_publish": 97
}
]
},
"popularity": {
"forks": 12,
"stars": 38,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2019-08-05",
"count": 1
},
{
"date": "2019-11-23",
"count": 1
},
{
"date": "2020-11-01",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-02-09",
"count": 1
},
{
"date": "2022-03-10",
"count": 1
},
{
"date": "2023-03-11",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-04-10",
"count": 1
},
{
"date": "2023-06-02",
"count": 1
},
{
"date": "2023-09-29",
"count": 1
},
{
"date": "2024-12-13",
"count": 1
}
],
"complete": true,
"collected": 12,
"total_forks": 12
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 42032,
"source_files_sampled": 54,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 6,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "dealerdirect/phpcodesniffer-composer-installer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "sirbrillig/phpcs-variable-analysis",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vimeo/psalm",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 6,
"direct_count": 0,
"indirect_count": 6
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 84,
"open_issues": 3,
"closed_ratio": 0.885,
"closed_issues": 23,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "sirbrillig",
"commits": 175,
"avatar_url": "https://avatars.githubusercontent.com/u/2036909?v=4"
},
{
"type": "User",
"login": "david-binda",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/3651036?v=4"
},
{
"type": "User",
"login": "xknown",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1081870?v=4"
},
{
"type": "User",
"login": "anomiex",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1030580?v=4"
},
{
"type": "User",
"login": "delputnam",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1379730?v=4"
},
{
"type": "User",
"login": "dmitr1y",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/12126090?v=4"
},
{
"type": "User",
"login": "LetrixZ",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/25001812?v=4"
},
{
"type": "User",
"login": "flaviozavan",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/959292?v=4"
},
{
"type": "User",
"login": "TomA-R",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1606901?v=4"
},
{
"type": "User",
"login": "szepeviktor",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/952007?v=4"
}
],
"contributors_sampled": 10,
"top_contributor_share": 0.884
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"csqa.yml",
"test-unix.yml",
"test-windows.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [
"phpcs.xml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 2,
"reason": "6 out of 24 merged PRs checked by a CI test -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 5/30 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "1 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "8f11cc8991d98985f5e0aadb37b4b7c01048eb0d",
"ran_at": "2026-08-01T20:14:27Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-05-24T21:55:15Z",
"oldest_open_prs": [
{
"number": 110,
"created_at": "2026-04-20T23:23:33Z",
"last_comment_at": "2026-06-20T21:42:13Z",
"last_comment_author": "sirbrillig"
},
{
"number": 114,
"created_at": "2026-04-21T14:06:23Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-05-24T21:54:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 26,
"created_at": "2020-06-03T07:22:59Z",
"last_comment_at": "2020-06-17T02:21:37Z",
"last_comment_author": "sirbrillig"
},
{
"number": 109,
"created_at": "2026-03-19T13:20:37Z",
"last_comment_at": "2026-03-19T21:05:38Z",
"last_comment_author": "sirbrillig"
},
{
"number": 115,
"created_at": "2026-04-21T16:52:31Z",
"last_comment_at": "2026-05-24T21:32:28Z",
"last_comment_author": "sirbrillig"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sirbrillig/phpcs-changed",
"host": "github.com",
"name": "phpcs-changed",
"owner": "sirbrillig"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 56,
"calibrated": 59,
"calibration": "2026-08-02"
}
}
],
"value": 59,
"inputs": {
"security": 37,
"vitality": 62,
"community": 50,
"governance": 66,
"calibration": "2026-08-02",
"engineering": 65,
"ai_readiness": 38,
"weighted_overall_raw": 56
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 62,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "weak",
"name": "Development activity",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"commits_last_year": 8,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "8 commits in the last year",
"points": 8.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 8
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "1 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"releases_count": 46,
"latest_release_tag": "v2.13.0",
"releases_from_tags": false,
"days_since_latest_release": 97,
"mean_days_between_releases": 116.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "46 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 46
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 97 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 97
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~116.2 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 116.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 71,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 71 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 71
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 50,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 12,
"stars": 38,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "38 stars",
"points": 25.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 38
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "12 forks",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 12
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"packages": [
"sirbrillig/phpcs-changed"
],
"dependents": 6,
"ecosystems": "packagist",
"total_downloads": 4915918,
"monthly_downloads": 177901
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "177,901 downloads/month across packagist",
"points": 70,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 177901,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "6 packages depend on it",
"points": 5.6,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 6
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 66,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 10,
"top_contributor_share": 0.884
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 88% of commits",
"points": 2.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 88
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "10 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 10
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 77,
"inputs": {
"merged_prs": 84,
"open_issues": 3,
"closed_issues": 23,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.885,
"closed_unmerged_prs": 4,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "88% of issues closed",
"points": 37.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 88
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "84/88 decided PRs merged",
"points": 28.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 84,
"decided": 88
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 5/30 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 69,
"inputs": {
"followers": 706,
"owner_type": "User",
"is_verified": null,
"owner_login": "sirbrillig",
"public_repos": 137,
"account_age_days": 5120
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "706 followers of sirbrillig",
"points": 20.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 706,
"login": "sirbrillig"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "137 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 137
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"sirbrillig/phpcs-changed"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 97
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 97 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 97
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "49 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 49
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 65,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpcs.xml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 24 merged PRs checked by a CI test -- score normalized to 2",
"points": 4,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"phpcs",
"svn",
"cli",
"php",
"linting"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 37,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 24 merged PRs checked by a CI test -- score normalized to 2",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 5/30 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "1 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 12
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 38,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.69,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "69 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 36.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 69,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpcs.xml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 42032,
"source_files_sampled": 54,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/54 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 54,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"cli": 2,
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-08-01T20:14:42.423567Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sirbrillig/phpcs-changed.svg",
"full_name": "sirbrillig/phpcs-changed",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with sirbrillig/phpcs-changed. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
