Applies a patch from a local or remote file to any package that is part of a given composer project. Patches can be defined both on project and on package level. Optional support for patch versioning, sequencing, custom patch applier configuration and composer command for testing/troubleshooting patches.
vaimo/composer-patches holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Engineering Quality (84/100) and lowest on AI Readiness (41/100). It was last updated today. 2 contributors account for most of its recent work.
71
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
71
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
3
affected_packages
1
assessed_packages
49
unassessed_packages
5
affected_by_severity
high 1
direct_affected_packages
0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 49 resolved dependencies against OSV. 5 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Type-checkable code — PHP without a type-check config
55/55
Manageable file sizes — 0/170 source files over 60KB
Inputs used
primary_language
PHP
largest_source_bytes
13,259
source_files_sampled
170
oversized_source_files
0
Key facts
304GitHub stars
36contributors
40commits, last 12 months
0days since last push
65releases
2bus factor
31open issues
Packagistpackage ecosystems
More detail
Star and fork history 304 ★ / 45 ⇿
304Stars
45Forks
65Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 3Minor 28Patch 34
Each point covers 9 days.
OpenSSF Scorecard 4.6 / 10
4.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 05:49 UTC
Full resolved dependency set from the GitHub dependency graph: 5 direct and 49 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Packagist
loophp/phposinfo
1.8.0
direct
Packagist
seld/jsonlint
1.11.0
direct
Packagist
symfony/console
8.0.11
direct
Packagist
vaimo/topological-sort
—
direct
Packagist
vaimo/topological-sort
2.0.1
direct
Packagist
camspiers/json-pretty
1.0.2
indirect
Packagist
composer-plugin-api
—
indirect
Packagist
composer/ca-bundle
1.5.11
indirect
Packagist
composer/class-map-generator
1.7.3
indirect
Packagist
composer/composer
2.9.8
indirect
Packagist
composer/metadata-minifier
1.0.0
indirect
Packagist
composer/pcre
3.3.2
indirect
Packagist
composer/semver
3.4.4
indirect
Packagist
composer/spdx-licenses
1.6.0
indirect
Packagist
composer/xdebug-handler
3.0.5
indirect
Packagist
justinrainbow/json-schema
6.8.2
indirect
Packagist
marc-mabe/php-enum
4.7.2
indirect
Packagist
mustache/mustache
3.2.0
indirect
Packagist
pdepend/pdepend
2.16.2
indirect
Packagist
phpcompatibility/php-compatibility
—
indirect
Packagist
phpcompatibility/php-compatibility
9.3.5
indirect
Packagist
phpmd/phpmd
2.15.0
indirect
Packagist
psr/container
2.0.2
indirect
Packagist
psr/log
3.0.2
indirect
Packagist
react/promise
3.3.0
indirect
Packagist
seld/phar-utils
1.2.1
indirect
Packagist
seld/signal-handler
2.0.2
indirect
Packagist
squizlabs/php_codesniffer
—
indirect
Packagist
squizlabs/php_codesniffer
3.13.5
indirect
Packagist
symfony/config
7.4.10
indirect
Packagist
symfony/dependency-injection
7.4.10
indirect
Packagist
symfony/deprecation-contracts
3.7.0
indirect
Packagist
symfony/filesystem
7.4.11
indirect
Packagist
symfony/finder
8.0.8
indirect
Packagist
symfony/polyfill-ctype
1.37.0
indirect
Packagist
symfony/polyfill-intl-grapheme
1.37.0
indirect
Packagist
symfony/polyfill-intl-normalizer
1.37.0
indirect
Packagist
symfony/polyfill-mbstring
1.37.0
indirect
Packagist
symfony/polyfill-php73
1.37.0
indirect
Packagist
symfony/polyfill-php80
1.37.0
indirect
Packagist
symfony/polyfill-php81
1.37.0
indirect
Packagist
symfony/polyfill-php84
1.37.0
indirect
Packagist
symfony/process
8.0.11
indirect
Packagist
symfony/service-contracts
3.7.0
indirect
Packagist
symfony/string
8.0.11
indirect
Packagist
symfony/var-exporter
8.0.9
indirect
Packagist
vaimo/composer-changelogs
2.0.0
indirect
Packagist
vaimo/composer-patches-local
—
indirect
Packagist
vaimo/composer-patches-proxy
1.0.0
indirect
Packagist
vaimo/composer-patches-target1
1.0.0
indirect
Packagist
vaimo/composer-patches-target2
1.2.0
indirect
Packagist
vaimo/composer-patches-target3
1.2.3
indirect
Packagist
vaimo/patches-file-owner
1.0.0
indirect
Packagist
vaimo/patches-search-owner
1.0.0
indirect
Dependency advisories 1
This repository publishes no package the index resolves, so its own dependency graph was assessed — 49 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 0 are direct. 5 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.
Package
Version
Relation
Severity
Advisories
Fixed in
composer/composer
2.9.8
indirect
high
3
2.10.2
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"composer",
"maintenance",
"constraints",
"patching",
"patcher",
"patches",
"applier",
"composer-plugin",
"plugin",
"composer-commands",
"patch-extension",
"composer-packages",
"composer-extension"
],
"is_fork": false,
"size_kb": 1929,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 344951,
"Shell": 31143
},
"pushed_at": "2026-07-22T05:48:39Z",
"created_at": "2016-02-23T10:04:04Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T13:20:13Z",
"description": " Applies a patch from a local or remote file to any package that is part of a given composer project. Patches can be defined both on project and on package level. Optional support for patch versioning, sequencing, custom patch applier configuration and composer command for testing/troubleshooting patches.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "http://www.vaimo.com",
"name": "Vaimo",
"type": "Organization",
"login": "vaimo",
"company": null,
"location": "Stockholm, Sweden",
"followers": 41,
"avatar_url": "https://avatars.githubusercontent.com/u/1503275?v=4",
"created_at": "2012-03-05T15:30:37Z",
"is_verified": null,
"public_repos": 117,
"account_age_days": 5251
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "5.6.1",
"kind": "patch",
"published_at": "2026-06-12T07:55:43Z"
},
{
"tag": "6.0.2",
"kind": "patch",
"published_at": "2026-06-12T07:56:54Z"
},
{
"tag": "6.0.1",
"kind": "patch",
"published_at": "2026-03-02T08:15:06Z"
},
{
"tag": "6.0.0",
"kind": "major",
"published_at": "2026-02-03T05:55:09Z"
},
{
"tag": "5.6.0",
"kind": "minor",
"published_at": "2026-01-29T13:33:48Z"
},
{
"tag": "5.5.4",
"kind": "patch",
"published_at": "2025-08-01T12:32:37Z"
},
{
"tag": "5.5.3",
"kind": "patch",
"published_at": "2025-07-30T11:05:15Z"
},
{
"tag": "5.5.2",
"kind": "patch",
"published_at": "2025-07-18T11:01:37Z"
},
{
"tag": "5.5.1",
"kind": "patch",
"published_at": "2025-07-14T09:41:39Z"
},
{
"tag": "5.5.0",
"kind": "minor",
"published_at": "2025-07-14T07:48:55Z"
},
{
"tag": "5.4.0",
"kind": "minor",
"published_at": "2025-06-04T12:21:26Z"
},
{
"tag": "5.3.1",
"kind": "patch",
"published_at": "2025-06-03T09:45:21Z"
},
{
"tag": "5.3.0",
"kind": "minor",
"published_at": "2025-06-02T10:34:34Z"
},
{
"tag": "5.2.2",
"kind": "patch",
"published_at": "2025-06-02T05:56:15Z"
},
{
"tag": "5.2.1",
"kind": "patch",
"published_at": "2025-04-17T11:31:51Z"
},
{
"tag": "5.2.0",
"kind": "minor",
"published_at": "2024-04-18T10:15:09Z"
},
{
"tag": "5.1.2",
"kind": "patch",
"published_at": "2023-11-22T15:08:20Z"
},
{
"tag": "5.1.1",
"kind": "patch",
"published_at": "2023-03-09T06:28:31Z"
},
{
"tag": "5.1.0",
"kind": "minor",
"published_at": "2022-07-08T11:09:43Z"
},
{
"tag": "5.0.0",
"kind": "major",
"published_at": "2022-05-13T10:32:35Z"
},
{
"tag": "4.22.4",
"kind": "patch",
"published_at": "2021-02-25T11:26:06Z"
},
{
"tag": "3.53.4",
"kind": "patch",
"published_at": "2021-02-25T11:26:35Z"
},
{
"tag": "4.22.3",
"kind": "patch",
"published_at": "2021-02-24T14:55:22Z"
},
{
"tag": "3.53.3",
"kind": "patch",
"published_at": "2021-02-24T14:57:04Z"
},
{
"tag": "4.22.2",
"kind": "patch",
"published_at": "2021-02-24T01:48:59Z"
},
{
"tag": "3.53.2",
"kind": "patch",
"published_at": "2021-02-24T01:38:10Z"
},
{
"tag": "4.22.1",
"kind": "patch",
"published_at": "2021-02-20T18:43:43Z"
},
{
"tag": "3.53.1",
"kind": "patch",
"published_at": "2021-02-20T18:43:12Z"
},
{
"tag": "4.22.0",
"kind": "minor",
"published_at": "2021-02-20T18:17:46Z"
},
{
"tag": "3.53.0",
"kind": "minor",
"published_at": "2021-02-20T18:17:08Z"
},
{
"tag": "4.21.1",
"kind": "patch",
"published_at": "2021-01-31T21:34:26Z"
},
{
"tag": "3.52.1",
"kind": "patch",
"published_at": "2021-01-31T21:34:00Z"
},
{
"tag": "4.21.0",
"kind": "minor",
"published_at": "2021-02-04T13:02:37Z"
},
{
"tag": "3.52.0",
"kind": "minor",
"published_at": "2021-01-31T12:23:05Z"
},
{
"tag": "4.16.1",
"kind": "patch",
"published_at": "2019-06-19T13:03:07Z"
},
{
"tag": "4.16.0",
"kind": "minor",
"published_at": "2019-04-09T21:36:43Z"
},
{
"tag": "4.15.0",
"kind": "minor",
"published_at": "2019-04-03T11:44:57Z"
},
{
"tag": "4.12.0",
"kind": "minor",
"published_at": "2019-04-01T05:56:04Z"
},
{
"tag": "4.11.0",
"kind": "minor",
"published_at": "2019-03-21T02:27:34Z"
},
{
"tag": "3.42.2",
"kind": "patch",
"published_at": "2019-03-21T02:26:56Z"
},
{
"tag": "4.6.0",
"kind": "minor",
"published_at": "2018-09-18T12:31:31Z"
},
{
"tag": "3.37.0",
"kind": "minor",
"published_at": "2018-09-18T12:31:49Z"
},
{
"tag": "4.5.0",
"kind": "minor",
"published_at": "2018-09-18T11:07:01Z"
},
{
"tag": "3.36.0",
"kind": "minor",
"published_at": "2018-09-18T11:07:21Z"
},
{
"tag": "4.4.3",
"kind": "patch",
"published_at": "2018-09-14T10:00:11Z"
},
{
"tag": "3.35.3",
"kind": "patch",
"published_at": "2018-09-14T10:00:31Z"
},
{
"tag": "4.4.2",
"kind": "patch",
"published_at": "2018-09-11T08:37:31Z"
},
{
"tag": "3.35.2",
"kind": "patch",
"published_at": "2018-09-11T08:37:50Z"
},
{
"tag": "4.4.1",
"kind": "patch",
"published_at": "2018-09-10T21:36:26Z"
},
{
"tag": "3.35.1",
"kind": "patch",
"published_at": "2018-09-10T21:37:02Z"
},
{
"tag": "4.4.0",
"kind": "minor",
"published_at": "2018-09-10T19:05:25Z"
},
{
"tag": "3.35.0",
"kind": "minor",
"published_at": "2018-09-10T19:06:02Z"
},
{
"tag": "4.3.0",
"kind": "minor",
"published_at": "2018-09-02T09:17:16Z"
},
{
"tag": "4.2.0",
"kind": "minor",
"published_at": "2018-08-22T01:37:40Z"
},
{
"tag": "4.1.1",
"kind": "patch",
"published_at": "2018-08-16T12:36:56Z"
},
{
"tag": "4.1.0",
"kind": "minor",
"published_at": "2018-08-16T12:37:37Z"
},
{
"tag": "4.0.0",
"kind": "major",
"published_at": "2018-08-15T20:07:13Z"
},
{
"tag": "3.31.0",
"kind": "minor",
"published_at": "2018-08-15T22:17:43Z"
},
{
"tag": "3.30.0",
"kind": "minor",
"published_at": "2018-08-14T18:36:56Z"
},
{
"tag": "3.29.1",
"kind": "patch",
"published_at": "2018-08-12T11:58:44Z"
},
{
"tag": "3.29.0",
"kind": "minor",
"published_at": "2018-08-12T09:47:30Z"
},
{
"tag": "3.28.1",
"kind": "patch",
"published_at": "2018-08-10T10:38:04Z"
},
{
"tag": "3.27.0",
"kind": "minor",
"published_at": "2018-05-18T10:48:04Z"
},
{
"tag": "3.26.0",
"kind": "minor",
"published_at": "2018-05-16T11:03:44Z"
},
{
"tag": "3.24.1",
"kind": "patch",
"published_at": "2018-03-02T09:25:53Z"
}
],
"recent_commits": [
{
"oid": "ca8c3670a6d04f6c08ef23561ee4de71c86f2f87",
"body": "…d-output\n\nUse stdout only when reusing patch command output",
"is_bot": false,
"headline": "Merge pull request #155 from coding46/fix/separate-stderr-from-comman…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-06-12T06:43:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a349355d805523d4b6479f698a609b975fa9ba1f",
"body": "Previous patch operations store their process output and interpolate that\nresult into later commands.\n\nThis breaks when a command that resolves a reusable value, such as a\npatch binary path, writes diagnostic output to stderr while still\nreturning a valid result on stdout. In that case the mixed out\n[…]\npagate stdout as the reusable operation result.\n\nAdd a scenario test that reproduces this by resolving the patch binary\nthrough a command that writes a warning to stderr and the binary path to\nstdout.",
"is_bot": false,
"headline": "Use stdout only when reusing patch command output",
"author_name": "Göran Bodenschatz",
"author_login": "coding46",
"committed_at": "2026-06-08T12:13:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42b55379e47b80a52fa6e43b66e4f47d6a7f8d61",
"body": "Feature/Composer 2.10 (master)",
"is_bot": false,
"headline": "Merge pull request #153 from vaimo/feature/composer-210-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-06-04T10:41:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17d8679ee3bfd83c4b19c47650ad368cf582d080",
"body": "…orkflows to check for Composer 2.10. No changes necessary for 2.10 in the application code.",
"is_bot": false,
"headline": "Updated dependency whitelists to include symfony/console 8, updated w…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-06-04T08:53:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2e902264334275ecb8e0299b0a232caf49ea3fd",
"body": "Updated lock file and workflows config with latest Composer versions (master)",
"is_bot": false,
"headline": "Merge pull request #152 from vaimo/chore/composer-update-may-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-05-18T06:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31dabb6b2f5ff9e8b066a5342f7f5e1ebeb3a772",
"body": null,
"is_bot": false,
"headline": "Updated lock file and workflows config with latest Composer versions",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-05-18T05:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21ac4b65854d91d149ab2da7ae0866568aed56cd",
"body": "Chore/update composer (master)",
"is_bot": false,
"headline": "Merge pull request #150 from vaimo/chore/composer-update-master",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-04-17T09:35:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "464f864f2cc5a37c147a25fbd733b9b9078d1728",
"body": "…rms from security audits. Updated the workflows config to use latest Composer versions since these days the pick is between 2.2 and 2.9 anyway, the versions in between are not relevant to be tested.",
"is_bot": false,
"headline": "Updated lock file with latest Composer version to eliminate false ala…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-04-17T09:13:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a61db92824a6e934ad0a5b9358a164e61881363",
"body": null,
"is_bot": false,
"headline": "Updated changelog files with latest information",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:57:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fbefaec8d272d1e375c39f8ae2cfc094247eb5f",
"body": "Feature/changelogs package update",
"is_bot": false,
"headline": "Merge pull request #147 from vaimo/feature/changelogs-package-update",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-03-02T07:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4088b91d42a8ee29d9f6fa7565de04d94a56205a",
"body": "… anymore",
"is_bot": false,
"headline": "Updated Github workflows config to not drop vaimo/composer-changelogs…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:39:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3064834a484c9fccb3d9bbc5d7343fbe2d62d3db",
"body": "…mo/composer-changelogs, which is compatible with PHP 7.1 - 8.5.",
"is_bot": false,
"headline": "Updated the dev requirements to allow installing newer version of vai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-03-02T07:35:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbd8bed2204e6a47672572a3857fca5706d76d12",
"body": "Feature/symfony console 8",
"is_bot": false,
"headline": "Merge pull request #146 from vaimo/feature/symfony-console-8",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-02-03T05:45:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5efa616383256a6699248e789e13933e6df68955",
"body": "…ssues with Composer config.platform.php causing issues when the version is too loose.",
"is_bot": false,
"headline": "Updated Github Workflows to use more specific PHP versions to avoid i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T09:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d761927f2ae943ff11ca1fdcce48abf85322d9d8",
"body": "…nce vaimo/composer-changelogs really needs maintenance for wider range of PHP version support.",
"is_bot": false,
"headline": "Updated changelog.json with version 6.0 info, not able to apply it si…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T08:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58111a8c1691c980fde70217093ecb4da4808f91",
"body": null,
"is_bot": false,
"headline": "Removed PHP 7.0 from workflows, updating documentation",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T07:34:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2001f59d5dfef84f07a36e00208c19093441f2c",
"body": "…s breaking change and will not work on PHP 7.0",
"is_bot": false,
"headline": "Updated Composer command classes with appropriate return type, this i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T07:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dec426ef53b4361d4527cdf5fe882b63080ea225",
"body": "… 3 support in favor of symfony/console 8. Composer 1 we can't anyway guarantee to work anymore and the whatever support there is should still be available in version 5 of the patcher.",
"is_bot": false,
"headline": "Updated composer.json to drop PHP 7.0, Composer 1 and symfony/console…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-02-02T06:51:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d007e2a3e5202b6c8a8ebce352b0a90e92e3544",
"body": "Feature/php85",
"is_bot": false,
"headline": "Merge pull request #144 from vaimo/feature/php85",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-02-02T06:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32b208fff8f915366991a39e30c9045c1b8cd927",
"body": "…ce in the first place, removed the verbosity from install command. The PHP 7.0 slowness needs to be looked at later.",
"is_bot": false,
"headline": "Removed the caching from Github workflows since this made no differen…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T13:42:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c39c590eaf005a56dd98e1fd81c57e1b9a44297",
"body": "…ws, we don't need Xdebug etc at the moment",
"is_bot": false,
"headline": "Testing disabling coverage from the PHP images used in Github workflo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T12:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08a029fe74c339b8a1133f4a2281f84851f0c754",
"body": "…shivammathur/setup-php, not sure why we didn't apply this in the first place",
"is_bot": false,
"headline": "Applying cache for Composer in Github workflows based on examples in …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T07:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "776ba2093ea1be4b592955d8890355d1ab1ab819",
"body": "…what's the bottleneck with slow PHP 7.0 test performance (doesn't replicate locally)",
"is_bot": false,
"headline": "In Github workflows increasing verbosity of 'composer update' to see …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-30T07:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94b55789af3d5513f97393de7d3fc1aae9c24136",
"body": "… by the constraints at this time. Should reduce false alarms from dependabot.",
"is_bot": false,
"headline": "Updated composer.lock to be based on latest possible packages allowed…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T13:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fc9f62640250de91b97c98e244b4efd72d8bc51",
"body": "…oser versions in general a bit",
"is_bot": false,
"headline": "Updated workflows to include checking for PHP 8.5, adjusting the Comp…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T13:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f06b94ab30e1e792dc06c8a5045960c62ca84b62",
"body": "feat: symfony > 7 compat",
"is_bot": false,
"headline": "Merge pull request #139 from KDederichs/feat/sf8_compat",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-01-29T13:26:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d8a1dad04e6cf5c368c09260b43d047f3b76a74",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/master' into feat/sf8_compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T12:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22890ab51a487e96ede37de3a2a24573de6c7b40",
"body": "…ny/console, added new PHPCS whitelist for symfony/console 7 for the dependency checker",
"is_bot": false,
"headline": "Updated testsuite to ignore some deprecation notices related to symfo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-29T12:22:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d469dc8fa4e8aff86a5acfacde70f7653f1763f0",
"body": null,
"is_bot": false,
"headline": "feat: symfony add compat for Symfony 3, 4, 5 and 7",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T12:02:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b6907a05d1c233dd064d0dde77ab9cf1aa51b10",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/master' into feat/sf8_compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2026-01-29T11:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9e345177de2348683c4ddc57129e5d01286b1b0",
"body": "…oser-1\n\nDropping Composer 1 from Github workflows setup",
"is_bot": false,
"headline": "Merge pull request #142 from vaimo/feature/github-workflows-drop-comp…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2026-01-29T05:54:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "121a22ef78baed100a60f13b87b8ed9066d6fd42",
"body": "…n working for a while. Composer 1 support otherwise not touched, we just won't be able to confirm if any future changes still actually work with it. Replaced also Composer 2.8 usage with 2.9, but didn't touch the <2.8 versions for now to have wider test coverage for different versions.",
"is_bot": false,
"headline": "Updated Github workflows to not use Composer 1, since this hasn't bee…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2026-01-28T11:30:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "210f39c86f597c2b29d9a06feb49fe94c35bcabb",
"body": null,
"is_bot": false,
"headline": "feat: symfony > 7 compat",
"author_name": "Kai Dederichs",
"author_login": "KDederichs",
"committed_at": "2025-12-13T15:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa96411d2ebe60ea4431a8f3cba414e37b47908c",
"body": "Feature/topological sort update",
"is_bot": false,
"headline": "Merge pull request #135 from vaimo/feature/topological-sort-update",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-08-01T12:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef13502de186199f2ad35b4d5fe6ee6c684c52ee",
"body": "…o functional change but output checks included the version of the package",
"is_bot": false,
"headline": "Adjusted tests to work with the new vaimo/topological-sort version, n…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-08-01T12:03:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2b1c08dce65305d3b4f3da21ba3ab8b44c3e15d",
"body": "….0.0 of the package as well. This should have latest changes from its parent repo but also still support same PHP versions as this package. The package should also come with updated autoload config that better works with dependency checks happening in this package.",
"is_bot": false,
"headline": "Updated dependency to vaimo/topological-sort to allow using version 2…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-08-01T11:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3681f46b4bf6170236124fadb09866fa17a67b7",
"body": null,
"is_bot": false,
"headline": "License file update",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-31T05:14:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b77233d251a2534a0f3eaa52d7670a40a00abe86",
"body": null,
"is_bot": false,
"headline": "Updated changelog and development docs",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-31T05:10:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ed64d242258f1757e88cb9dad3d175e983461d5",
"body": "…sion-checks\n\nFix/Invalid Composer version checks",
"is_bot": false,
"headline": "Merge pull request #134 from vaimo/fix/issue-122-invalid-composer-ver…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-30T11:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113cf6368bd8a64a1fdc242fd45b8d1c5bab97d9",
"body": "…RSION constant as the static method seems to return much more usable version number for comparison purposes, while VERSION may not contain version number at all in preview builds",
"is_bot": false,
"headline": "Updated Composer version checks to use getVersion() instead of the VE…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-30T10:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "506a088413ccb7bdd9b91be468929a25052e0200",
"body": "…ased on composer.json",
"is_bot": false,
"headline": "Updating changelog files, ensuring that composer.lock is up to date b…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-18T10:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "724be3acedf5e55ce0b2be17c256c12ba89681a3",
"body": "…-during-package-reset\n\nFix incorrect handling of promises during package reset",
"is_bot": false,
"headline": "Merge pull request #124 from vaimo/fix/incorrect-handling-of-promises…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-18T10:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa8cef59c5ca663cade809d8f2661e64863763ee",
"body": "…ing-of-promises-during-package-reset",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/incorrect-handl…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T10:25:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "311cf7d8b204fd4fddf6d3540d027a9cb46e5274",
"body": "Fix/issue 132 phposinfo compatibility",
"is_bot": false,
"headline": "Merge pull request #133 from vaimo/fix/issue-132-phposinfo-compatibility",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T09:36:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1faf5a7174ba5c56269eee7f4e4bac61cec05e7",
"body": null,
"is_bot": false,
"headline": "Ignored warning from phpcs related to the class aliases",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T09:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15b62b61f806fbdc21c32199c4d306a88e0d1ed8",
"body": "… back to src/Config/Context.php. The autoloader approach is not valid in Composer plugin context where the workaround is required already when installing the module, as autoloader configs apply only after the packages are installed. Relates to issue https://github.com/vaimo/composer-patches/issues/132",
"is_bot": false,
"headline": "Replaced the compatibility.php workaround by adding the class aliases…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T09:10:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dd06f1d5336e1f25740b1de3ae9528a2949986d",
"body": "Feature/pr 129 tests",
"is_bot": false,
"headline": "Merge pull request #131 from vaimo/feature/pr-129-tests",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T07:47:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f85da01741e795045ab803cba97905e9e67f11c",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/pr-129-tests",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-07-14T07:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d74b20b30f916f1f34744bc873b3fef53c9630e",
"body": "Add negated dependency support",
"is_bot": false,
"headline": "Merge pull request #129 from adamj88/depends-exclusion",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-07-14T07:28:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b05f05fb257e6cb08d18de1e5f1e524a47076039",
"body": "…ll/129, adjusting other tests",
"is_bot": false,
"headline": "Preparing test cases for https://github.com/vaimo/composer-patches/pu…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-06T12:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8edab0256633432985f522e59707d9baff13264c",
"body": null,
"is_bot": false,
"headline": "Add negated dependency support",
"author_name": "Adam Johnson",
"author_login": "adamj88",
"committed_at": "2025-06-05T15:57:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b54c9fdf474dd4b73f9601e7d6f4bc16c3c5526a",
"body": null,
"is_bot": false,
"headline": "Fixed loose formatting issue in the changes",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:26:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c08af5b8c33a0f9fdef9a104163d34de3550fd2",
"body": "…ing-of-promises-during-package-reset",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/incorrect-handl…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98d94b30fde364fe4f55e797e7ccd5543e205744",
"body": null,
"is_bot": false,
"headline": "Updated changelog.json with 5.4.0 release notes",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T12:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b4ba350a9bfe41d07261a38006667e595dba4f",
"body": "Feature/package maintenance",
"is_bot": false,
"headline": "Merge pull request #125 from vaimo/feature/package-maintenance",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-04T11:54:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ef29be7408a434e8daa68dc0775d4a19e55222a",
"body": "…sable, it does help reducing costs. Also updated missing releases from changelog.json.",
"is_bot": false,
"headline": "Added back fail fast strategy since although this can be useful to di…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T11:05:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47bd2cbdb31eb98668461cb7b9f14f5b6ffd9be",
"body": "…0 in composer.json as platform seems to give you older Symfony version which causes inconsistent outputs in Composer 1",
"is_bot": false,
"headline": "Updated workflow with specific PHP 7.0 version, since setting just 7.…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T10:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "632bf79e13a60521c378a58f297c351bc673f9bb",
"body": "…from https://github.com/vaimo/composer-patches/pull/127 are pretty simple to include. Included also PHP 7.0 support back, since the PHP 8.4 compatibility changes from https://github.com/vaimo/composer-patches/pull/121 were possible to achieve another way. Updated Github workflow to include more PHP\n[…]\n earlier. Updated dependency whitelists based on the older versions, looks like symfony/console has lots of incompatibilities that have been suppressed with function_exists and autoloader workarounds.",
"is_bot": false,
"headline": "Bringing back compatibility with past PHP versions since the changes …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-04T10:02:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "66353aea7d0a89d85a1180f2eb30240e76e37cc0",
"body": "…ntenance",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/package-mai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T09:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55eb5a5347a20ef6bf662204f1f4bd8b22ca8f89",
"body": "Fix/php backwards compatibility",
"is_bot": false,
"headline": "Merge pull request #127 from vaimo/fix/php-backwards-compatibility",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-03T09:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c39b93e269d7a2de9965bf28ef36e4b5bcb6404",
"body": "…ecame the case already earlier when PHP 8.4 compatibility changes were implemented.",
"is_bot": false,
"headline": "Updated minimum PHP version requirement to 7.1, since this actually b…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T09:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e077f73081cd903c596f2e4b13a608de2d4ce9",
"body": "…sinfo versions 1.6 and 1.7, previously we were locked to 1.7 despite composer.json allowing installing 1.6. Updated also src/Utils/FileSystemUtils.php to use array_merge instead of merging arrays through spread operators, since latter is only supported in PHP 7.4.",
"is_bot": false,
"headline": "Updated src/Config/Context.php with workaround to support loophp/phpo…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T08:07:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "384b76eed2dcc5d79c618274ffc4d6c8d4b6accf",
"body": "…sues found by code analysis after merging latest changes to the branch, added alternative solution for https://github.com/vaimo/composer-patches/pull/110 and updated test to check for the solution",
"is_bot": false,
"headline": "Updated bin/test to allow rendering debug outputs in tests, fixing is…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-03T07:14:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1267a528025f5583c3b304a3c9c1471c859c1b7e",
"body": "…ntenance",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/package-mai…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T11:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d41c3cad985b5e192f0f08a6ab955cf7370087e",
"body": "… based on some new changes in master branch",
"is_bot": false,
"headline": "Removing invalid whitespaces in documentation, added also information…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T11:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f674021cdf51727fdc8cc4357afdf7d5fb78af49",
"body": "Allow wildcard in patches search folder path",
"is_bot": false,
"headline": "Merge pull request #86 from indykoning/feature/glob-folder-path",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T10:33:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f7dbe5e2dec065768a7b7f8b483a6f332c9d69c",
"body": null,
"is_bot": false,
"headline": "Moved globbing to FileSystemUtils implementing the GlobIterator",
"author_name": "indykoning",
"author_login": "indykoning",
"committed_at": "2025-06-02T07:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5393df08cc08f42315ae348ab92f75f79e18cd4",
"body": null,
"is_bot": false,
"headline": "Documentation updates in docs/DEVELOPMENT.md",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T07:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf4bf96a6bd74c685758cbf5e9f3eecb6815045",
"body": "…tinued\n\nFeature/lock data type changes continued",
"is_bot": false,
"headline": "Merge pull request #126 from vaimo/feature/lock-data-type-changes-con…",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T05:52:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bd598be362f692d426b168c4ff0f4e519e5acc6",
"body": "…ull/123 further by implementing the data type fix from Composer itself in src/Repository/Lock/Sanitizer, which should ensure the data types remain consistent in composer.lock even if the Sanitizer does need to do changes",
"is_bot": false,
"headline": "Refined the solution from https://github.com/vaimo/composer-patches/p…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-06-02T05:50:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46927d29cd9f0e2c948fd7495d1e38fc8258cbf8",
"body": "Only rewrite lockfile if the data has changed",
"is_bot": false,
"headline": "Merge pull request #123 from fredden/feature/lock-data-type-changes",
"author_name": "jooname",
"author_login": "jooname",
"committed_at": "2025-06-02T05:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0697e9bb219dd60c9fd60c6846da7b94b3d90200",
"body": "…ests",
"is_bot": false,
"headline": "Workflow seems to work now, changing trigger to be based on pull requ…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e05a17a7d52abc85d310d12ed3e9907566c39da",
"body": "…the duplicate error. This can affect more relevant errors, but at least the change is specific to the three tests were the error appears in",
"is_bot": false,
"headline": "Instead of depending on specific react/promise version, filtered out …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:37:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88bdec33e98b30f5260a9e9fcb09f8167fb40e73",
"body": "…mpatible with PHP 8.4",
"is_bot": false,
"headline": "Dropping the react/promise dev requirement since 2 is not actually co…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35abfd8bc88197ab41276a2f61a5ba92cfa3dc0f",
"body": "…t, since they started requiring react/promise 3",
"is_bot": false,
"headline": "Updating workflow further to drop the Composer 2.7 versions down a bi…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:14:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01c4c3a3222d772d79e3cc7ee310dafdca4ca5ed",
"body": "…ple 2.8.9 has support for react/promise 2 still",
"is_bot": false,
"headline": "Updating workflow to use latest patch versions for Composer, for exam…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "378a0ba8438d9933409da6153d6acdc31193b24d",
"body": "…poser 2.7, adjusting some of the test scenarios to be more flexible about certain details in the output assertions, added explicit dev requirement for react/promise version 2 since in later Composer versions there's one duplicate error related to unhandled promise rejection which made it hard to make output assertions with",
"is_bot": false,
"headline": "Fixed issue with some of the allow-plugins configs not working in Com…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T10:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef1364fe5c35405aa89c0451668efdeb74dc448d",
"body": "…ommit certain errors in Composer that you wouldn't get locally, dropping all .output-v2 files in favour of .output since 8.4 seems to manage to use .output in some cases anyway and we don't currently need differentiating between Composer 1 and 2",
"is_bot": false,
"headline": "Updated workflow configuration with environment variable that should …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T07:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acdeeb58b9ceba975210e1ab82a96aff660f3cfb",
"body": "…st scenario was just affected by incorrect Composer version detection when the test were being run in non-interactive mode",
"is_bot": false,
"headline": "Turns out that the output changes were actually correct, the later te…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-30T06:29:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5ddc946a5b3c9449e789e87b046d520f29069f6",
"body": "…lines in outputs is not correct way to solve the problem, testing out if dropping the stty calls in bin/test works better since this doesn't seem to work in the workflow",
"is_bot": false,
"headline": "Noticed through a later test scenario output that adding the install …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T12:04:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09b51fd9883a45ace83b19af76249846426f7aca",
"body": null,
"is_bot": false,
"headline": "Adjusting the symfony/console related compatibility whitelist",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:50:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ee628df1ed6ba778b162f2c7e2748ba89d5ef14",
"body": null,
"is_bot": false,
"headline": "Fixed PHP 8 specific issue with patch:validate command",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:38:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b609e36c61009225ecf1802db480346d962900ee",
"body": "… unrecognised",
"is_bot": false,
"headline": "Fixed issue with dependency analysis where empty autoloader paths get…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T11:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41ece9f05bd0bf98f27372b5b95c5fa024970655",
"body": "…urrently not compatible with later versions. Adjusting more output expectations in the test scenarios.",
"is_bot": false,
"headline": "Added explicit requirement for symfony/console <7.0, the package is c…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41421a409f92b0c7cf1f73dbdbfd592d2fd631f7",
"body": "…of vaimo/composer-changelogs in workflow since it does not seem to be compatible with newer versions of symfony/console",
"is_bot": false,
"headline": "Adjusting workflow Composer version in PHP 8.2, adding back dropping …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:37:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb9062db9865cae14b09ba6c3621aa98a1f814a",
"body": "…ocally can customise mutagen.yml to include version control files to get matching files. Still uncertain where one installation output line is coming from, but for now prioritising the workflow.",
"is_bot": false,
"headline": "Dropped .git removal, opted for adjusting the test outputs instead. L…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T10:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6db110632d40be4e5799b35447657f666140e3ef",
"body": "…clone the code, testing out dropping .git folder manually",
"is_bot": false,
"headline": "Adding back actions/checkout in workflow since of course you need to …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eebe31a972c310f90a3c367ae29e3f215856d57a",
"body": "…more explicitly, since this can mismatch with the runner Composer version. Trying out also dropping actions/checkout since this might be more closer to local execution of tests without git.",
"is_bot": false,
"headline": "Adding step in workflow to specify the dev composer/composer version …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:42:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5d960a9c8d3c592f977b759eb289515c02146e0",
"body": "…low since former doesn't actually succeed to change the runner PHP version and latter appears to have support for Composer as well",
"is_bot": false,
"headline": "Switched from php-actions/composer to shivammathur/setup-php in workf…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:16:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d60c7881eda06010fb6d7ed319fb7f780b0c8049",
"body": "…stallations/",
"is_bot": false,
"headline": "Adding allow-plugins configs in all composer.json files under test/in…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T09:05:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2378ec20fd7a5434182e6e7e4fdcfec1146c744",
"body": "…ince it seems like 8.3 is getting used, updated test script to not use --no-plugins since this doesn't seem to work in Github workflows and it works locally with and without it",
"is_bot": false,
"headline": "Trying out different PHP version definitions in the workflow config s…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68d1ad43eebfd7300b0d4adcb0c3a8aff3e52665",
"body": null,
"is_bot": false,
"headline": "Setting allow-plugins for sandbox composer.json",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7748a5e8649e6b9bcac32c1f6999dc1ded25985",
"body": "…constraints in test sandbox",
"is_bot": false,
"headline": "Reverted code sniffer update in root composer.json, loosening up the …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T08:14:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50192454920623ce306a8f217a11448fcd5d7bf1",
"body": "…ave some PHP compatibility issues",
"is_bot": false,
"headline": "Bumping up code sniffer version dependency a bit since 2.9 seems to h…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T07:09:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "143109f12e797b4a4388904279262ca39193cb3d",
"body": "…he requirement to version with consistent namespace. Does limit using the package to PHP versions 7.4 and above.",
"is_bot": false,
"headline": "Dropped the loophp/phposinfo compatibility workaround and bumped up t…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d809fe8418021986cc8f9d1ee264bf2020f97337",
"body": "…ying out specifying the allowed plugin in dependency analysis script itself",
"is_bot": false,
"headline": "Updating the root composer.json allow-plugins setting didn't work, tr…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:35:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56ecaa6e6d741c2f3f61b7384a655e1b2fcc10f3",
"body": "…not support latest PHP versions anyway, has also some issues with older versions as well",
"is_bot": false,
"headline": "Dropping sebastian/phpcpd since this is currently abandoned and will …",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:31:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bbad9f4fd2704f59b9605de29bd2cc0b8854eb1",
"body": null,
"is_bot": false,
"headline": "Flipped the class aliases in loophp/phposinfo compatibility workaround",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4845cfda829730f3648cf590a7f0be1543a46e8b",
"body": "… and 1.7.0, although we could also consider bumping up the version requirement to not need to do this workaround",
"is_bot": false,
"headline": "Added workaround for loopphp/phposinfo namespace change between 1.6.5…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf2ea297eca02612d8bf14c01b5ac83cc4da6e8",
"body": "…s dev dependency and doesn't support PHP <7.4, updated allow-plugins settings",
"is_bot": false,
"headline": "Added dropping of vaimo/composer-changelogs in workflows since this i…",
"author_name": "Joona Melartin",
"author_login": "jooname",
"committed_at": "2025-05-28T06:02:02Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 65,
"commits_last_year": 40,
"latest_release_at": "2026-06-12T07:55:43Z",
"latest_release_tag": "5.6.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 8,
"days_since_latest_release": 39,
"mean_days_between_releases": 37
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "vaimo/composer-patches",
"exists": true,
"license": "MIT",
"keywords": [
"plugin",
"utility",
"tools",
"maintenance",
"utils",
"utilities",
"composer plugin",
"patching",
"backports",
"Fixes",
"version restriction",
"indirect restrictions",
"patch description",
"remote patch files",
"downloaded patches",
"package bug-fix",
"package patches",
"patch exclusion",
"development patches",
"hot-fixes",
"hotfixes",
"environment flags",
"skipped packages",
"patch skipping",
"maintenance tools",
"multiple formats",
"patch branching",
"multi-version patches",
"bundled patches",
"patch command",
"os-specific config",
"configurable patch applier",
"back-ports",
"bulk patches",
"patch header",
"patch meta-data",
"resolve patches",
"patch search",
"patch resolve",
"patcher",
"composer command"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/vaimo/composer-patches",
"is_deprecated": false,
"latest_version": "6.0.2",
"repository_url": "https://github.com/vaimo/composer-patches",
"versions_count": 204,
"total_downloads": 4670819,
"dependents_count": 23,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 91770,
"first_published_at": null,
"latest_published_at": "2026-06-12T06:43:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 39
}
]
},
"popularity": {
"forks": 45,
"stars": 304,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2017-08-27",
"count": 1
},
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2019-02-20",
"count": 1
},
{
"date": "2019-03-29",
"count": 1
},
{
"date": "2019-10-25",
"count": 1
},
{
"date": "2019-11-06",
"count": 1
},
{
"date": "2019-11-12",
"count": 1
},
{
"date": "2019-11-19",
"count": 1
},
{
"date": "2020-01-29",
"count": 1
},
{
"date": "2020-04-04",
"count": 1
},
{
"date": "2020-04-29",
"count": 1
},
{
"date": "2020-06-16",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2020-12-21",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-02-08",
"count": 1
},
{
"date": "2021-02-24",
"count": 1
},
{
"date": "2021-03-12",
"count": 1
},
{
"date": "2021-05-05",
"count": 1
},
{
"date": "2021-06-07",
"count": 2
},
{
"date": "2021-10-05",
"count": 1
},
{
"date": "2021-12-12",
"count": 1
},
{
"date": "2022-02-24",
"count": 1
},
{
"date": "2022-03-02",
"count": 1
},
{
"date": "2022-03-12",
"count": 1
},
{
"date": "2022-04-12",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2023-02-15",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-03-23",
"count": 1
},
{
"date": "2023-03-26",
"count": 1
},
{
"date": "2023-12-03",
"count": 1
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2025-02-10",
"count": 1
},
{
"date": "2025-02-17",
"count": 1
},
{
"date": "2025-02-26",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-12-13",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
}
],
"complete": true,
"collected": 43,
"total_forks": 45
},
"star_history": {
"days": [
{
"date": "2017-06-01",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-07",
"count": 2
},
{
"date": "2017-07-30",
"count": 1
},
{
"date": "2017-07-31",
"count": 12
},
{
"date": "2017-08-01",
"count": 1
},
{
"date": "2017-08-03",
"count": 1
},
{
"date": "2017-08-04",
"count": 1
},
{
"date": "2017-08-08",
"count": 1
},
{
"date": "2017-08-14",
"count": 1
},
{
"date": "2017-08-23",
"count": 1
},
{
"date": "2017-08-29",
"count": 1
},
{
"date": "2018-01-21",
"count": 1
},
{
"date": "2018-01-29",
"count": 1
},
{
"date": "2018-03-01",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-07",
"count": 3
},
{
"date": "2018-03-15",
"count": 1
},
{
"date": "2018-03-19",
"count": 3
},
{
"date": "2018-03-21",
"count": 2
},
{
"date": "2018-04-07",
"count": 1
},
{
"date": "2018-04-20",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-25",
"count": 1
},
{
"date": "2018-06-19",
"count": 1
},
{
"date": "2018-06-21",
"count": 1
},
{
"date": "2018-06-27",
"count": 1
},
{
"date": "2018-07-11",
"count": 1
},
{
"date": "2018-07-30",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-16",
"count": 1
},
{
"date": "2018-08-24",
"count": 1
},
{
"date": "2018-08-25",
"count": 1
},
{
"date": "2018-08-26",
"count": 1
},
{
"date": "2018-09-04",
"count": 1
},
{
"date": "2018-09-06",
"count": 18
},
{
"date": "2018-09-07",
"count": 2
},
{
"date": "2018-09-10",
"count": 1
},
{
"date": "2018-09-11",
"count": 1
},
{
"date": "2018-09-17",
"count": 1
},
{
"date": "2018-10-19",
"count": 1
},
{
"date": "2018-10-21",
"count": 1
},
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2018-11-12",
"count": 1
},
{
"date": "2018-11-21",
"count": 1
},
{
"date": "2018-12-03",
"count": 2
},
{
"date": "2018-12-06",
"count": 1
},
{
"date": "2019-01-13",
"count": 1
},
{
"date": "2019-01-15",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2019-02-14",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-27",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-04",
"count": 1
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-27",
"count": 1
},
{
"date": "2019-05-03",
"count": 1
},
{
"date": "2019-06-17",
"count": 1
},
{
"date": "2019-06-23",
"count": 1
},
{
"date": "2019-06-24",
"count": 1
},
{
"date": "2019-06-25",
"count": 1
},
{
"date": "2019-07-05",
"count": 2
},
{
"date": "2019-07-25",
"count": 1
},
{
"date": "2019-08-03",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-09-17",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-09-30",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-11-18",
"count": 2
},
{
"date": "2019-11-19",
"count": 2
},
{
"date": "2019-11-20",
"count": 5
},
{
"date": "2019-11-21",
"count": 5
},
{
"date": "2019-11-24",
"count": 1
},
{
"date": "2019-11-25",
"count": 1
},
{
"date": "2019-11-26",
"count": 4
},
{
"date": "2019-11-29",
"count": 2
},
{
"date": "2019-12-06",
"count": 1
},
{
"date": "2019-12-10",
"count": 1
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-18",
"count": 1
},
{
"date": "2019-12-24",
"count": 1
},
{
"date": "2019-12-25",
"count": 1
},
{
"date": "2020-01-01",
"count": 1
},
{
"date": "2020-01-07",
"count": 1
},
{
"date": "2020-01-20",
"count": 1
},
{
"date": "2020-01-21",
"count": 1
},
{
"date": "2020-01-22",
"count": 2
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-02-03",
"count": 2
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-24",
"count": 1
},
{
"date": "2020-02-26",
"count": 1
},
{
"date": "2020-03-12",
"count": 1
},
{
"date": "2020-04-01",
"count": 1
},
{
"date": "2020-04-17",
"count": 1
},
{
"date": "2020-05-26",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-05-30",
"count": 1
},
{
"date": "2020-06-02",
"count": 1
},
{
"date": "2020-06-20",
"count": 1
},
{
"date": "2020-07-20",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-08-13",
"count": 1
},
{
"date": "2020-10-20",
"count": 3
},
{
"date": "2020-10-21",
"count": 2
},
{
"date": "2020-10-23",
"count": 2
},
{
"date": "2020-10-26",
"count": 1
},
{
"date": "2020-11-04",
"count": 1
},
{
"date": "2020-11-11",
"count": 1
},
{
"date": "2020-11-12",
"count": 2
},
{
"date": "2020-11-18",
"count": 2
},
{
"date": "2020-12-07",
"count": 1
},
{
"date": "2020-12-08",
"count": 1
},
{
"date": "2020-12-11",
"count": 1
},
{
"date": "2021-01-14",
"count": 1
},
{
"date": "2021-02-24",
"count": 1
},
{
"date": "2021-02-25",
"count": 1
},
{
"date": "2021-03-02",
"count": 2
},
{
"date": "2021-03-03",
"count": 1
},
{
"date": "2021-03-04",
"count": 2
},
{
"date": "2021-03-11",
"count": 1
},
{
"date": "2021-04-26",
"count": 1
},
{
"date": "2021-04-27",
"count": 1
},
{
"date": "2021-05-25",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-07-01",
"count": 1
},
{
"date": "2021-07-20",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-09-27",
"count": 1
},
{
"date": "2021-10-07",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-17",
"count": 1
},
{
"date": "2021-12-02",
"count": 1
},
{
"date": "2021-12-25",
"count": 1
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-16",
"count": 2
},
{
"date": "2022-02-17",
"count": 2
},
{
"date": "2022-02-18",
"count": 7
},
{
"date": "2022-03-01",
"count": 1
},
{
"date": "2022-03-02",
"count": 7
},
{
"date": "2022-03-08",
"count": 1
},
{
"date": "2022-03-29",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-05-03",
"count": 1
},
{
"date": "2022-05-18",
"count": 1
},
{
"date": "2022-06-02",
"count": 1
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-08-31",
"count": 1
},
{
"date": "2022-09-07",
"count": 1
},
{
"date": "2022-09-28",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-29",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-18",
"count": 1
},
{
"date": "2022-12-15",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-01-14",
"count": 1
},
{
"date": "2023-01-22",
"count": 1
},
{
"date": "2023-01-26",
"count": 1
},
{
"date": "2023-01-27",
"count": 2
},
{
"date": "2023-03-27",
"count": 1
},
{
"date": "2023-04-10",
"count": 1
},
{
"date": "2023-04-27",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-08-11",
"count": 1
},
{
"date": "2023-08-13",
"count": 1
},
{
"date": "2023-08-18",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-09-05",
"count": 1
},
{
"date": "2023-10-11",
"count": 1
},
{
"date": "2023-11-24",
"count": 2
},
{
"date": "2023-11-28",
"count": 1
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-09",
"count": 1
},
{
"date": "2024-01-04",
"count": 1
},
{
"date": "2024-01-16",
"count": 2
},
{
"date": "2024-02-23",
"count": 1
},
{
"date": "2024-02-26",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-05-10",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-06",
"count": 4
},
{
"date": "2024-06-10",
"count": 1
},
{
"date": "2024-06-11",
"count": 1
},
{
"date": "2024-07-15",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-08-14",
"count": 1
},
{
"date": "2024-08-17",
"count": 1
},
{
"date": "2024-08-22",
"count": 1
},
{
"date": "2024-09-02",
"count": 1
},
{
"date": "2024-09-15",
"count": 1
},
{
"date": "2024-11-11",
"count": 1
},
{
"date": "2024-11-12",
"count": 2
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2025-02-27",
"count": 1
},
{
"date": "2025-03-12",
"count": 2
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-06-09",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-07-22",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-12-21",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-03-26",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
}
],
"complete": true,
"collected": 303,
"total_stars": 304
},
"open_issues_and_prs": 33
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 13259,
"source_files_sampled": 170,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "composer/composer",
"direct": false,
"version": "2.9.8",
"severity": "high",
"ecosystem": "packagist",
"cvss_score": 7,
"advisory_ids": [
"GHSA-499r-g7pc-vmp9",
"GHSA-g6xq-892h-64w3",
"GHSA-gjfg-22fp-rrxx"
],
"fixed_version": "2.10.2",
"advisory_count": 3,
"oldest_advisory_days": 1
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1
},
"advisory_count": 3,
"affected_count": 1,
"assessed_count": 49,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 5,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "loophp/phposinfo",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.6 || ^1.7"
},
{
"name": "seld/jsonlint",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.7.1"
},
{
"name": "symfony/console",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^4.0 || ^5.0 || ^6.0 || ^7.0 || ^8.0"
},
{
"name": "vaimo/topological-sort",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.0 || ^2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "loophp/phposinfo",
"direct": true,
"version": "1.8.0",
"ecosystem": "packagist"
},
{
"name": "seld/jsonlint",
"direct": true,
"version": "1.11.0",
"ecosystem": "packagist"
},
{
"name": "symfony/console",
"direct": true,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "vaimo/topological-sort",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vaimo/topological-sort",
"direct": true,
"version": "2.0.1",
"ecosystem": "packagist"
},
{
"name": "camspiers/json-pretty",
"direct": false,
"version": "1.0.2",
"ecosystem": "packagist"
},
{
"name": "composer-plugin-api",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/ca-bundle",
"direct": false,
"version": "1.5.11",
"ecosystem": "packagist"
},
{
"name": "composer/class-map-generator",
"direct": false,
"version": "1.7.3",
"ecosystem": "packagist"
},
{
"name": "composer/composer",
"direct": false,
"version": "2.9.8",
"ecosystem": "packagist"
},
{
"name": "composer/metadata-minifier",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "composer/pcre",
"direct": false,
"version": "3.3.2",
"ecosystem": "packagist"
},
{
"name": "composer/semver",
"direct": false,
"version": "3.4.4",
"ecosystem": "packagist"
},
{
"name": "composer/spdx-licenses",
"direct": false,
"version": "1.6.0",
"ecosystem": "packagist"
},
{
"name": "composer/xdebug-handler",
"direct": false,
"version": "3.0.5",
"ecosystem": "packagist"
},
{
"name": "justinrainbow/json-schema",
"direct": false,
"version": "6.8.2",
"ecosystem": "packagist"
},
{
"name": "marc-mabe/php-enum",
"direct": false,
"version": "4.7.2",
"ecosystem": "packagist"
},
{
"name": "mustache/mustache",
"direct": false,
"version": "3.2.0",
"ecosystem": "packagist"
},
{
"name": "pdepend/pdepend",
"direct": false,
"version": "2.16.2",
"ecosystem": "packagist"
},
{
"name": "phpcompatibility/php-compatibility",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpcompatibility/php-compatibility",
"direct": false,
"version": "9.3.5",
"ecosystem": "packagist"
},
{
"name": "phpmd/phpmd",
"direct": false,
"version": "2.15.0",
"ecosystem": "packagist"
},
{
"name": "psr/container",
"direct": false,
"version": "2.0.2",
"ecosystem": "packagist"
},
{
"name": "psr/log",
"direct": false,
"version": "3.0.2",
"ecosystem": "packagist"
},
{
"name": "react/promise",
"direct": false,
"version": "3.3.0",
"ecosystem": "packagist"
},
{
"name": "seld/phar-utils",
"direct": false,
"version": "1.2.1",
"ecosystem": "packagist"
},
{
"name": "seld/signal-handler",
"direct": false,
"version": "2.0.2",
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "squizlabs/php_codesniffer",
"direct": false,
"version": "3.13.5",
"ecosystem": "packagist"
},
{
"name": "symfony/config",
"direct": false,
"version": "7.4.10",
"ecosystem": "packagist"
},
{
"name": "symfony/dependency-injection",
"direct": false,
"version": "7.4.10",
"ecosystem": "packagist"
},
{
"name": "symfony/deprecation-contracts",
"direct": false,
"version": "3.7.0",
"ecosystem": "packagist"
},
{
"name": "symfony/filesystem",
"direct": false,
"version": "7.4.11",
"ecosystem": "packagist"
},
{
"name": "symfony/finder",
"direct": false,
"version": "8.0.8",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-ctype",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-intl-grapheme",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-intl-normalizer",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-mbstring",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php73",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php80",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php81",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/polyfill-php84",
"direct": false,
"version": "1.37.0",
"ecosystem": "packagist"
},
{
"name": "symfony/process",
"direct": false,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "symfony/service-contracts",
"direct": false,
"version": "3.7.0",
"ecosystem": "packagist"
},
{
"name": "symfony/string",
"direct": false,
"version": "8.0.11",
"ecosystem": "packagist"
},
{
"name": "symfony/var-exporter",
"direct": false,
"version": "8.0.9",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-changelogs",
"direct": false,
"version": "2.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-local",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-proxy",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target1",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target2",
"direct": false,
"version": "1.2.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/composer-patches-target3",
"direct": false,
"version": "1.2.3",
"ecosystem": "packagist"
},
{
"name": "vaimo/patches-file-owner",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "vaimo/patches-search-owner",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 54,
"direct_count": 5,
"indirect_count": 49
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 58,
"open_issues": 31,
"closed_ratio": 0.627,
"closed_issues": 52,
"closed_unmerged_prs": 15
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jooname",
"commits": 104,
"avatar_url": "https://avatars.githubusercontent.com/u/36262953?v=4"
},
{
"type": "User",
"login": "allanpaiste",
"commits": 82,
"avatar_url": "https://avatars.githubusercontent.com/u/3738135?v=4"
},
{
"type": "User",
"login": "cweagans",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/101590?v=4"
},
{
"type": "User",
"login": "zamoroka",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/9164112?v=4"
},
{
"type": "User",
"login": "fabianx-ai",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/354804?v=4"
},
{
"type": "User",
"login": "adamj88",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1053393?v=4"
},
{
"type": "User",
"login": "peterjaap",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/431360?v=4"
},
{
"type": "User",
"login": "KDederichs",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/24696606?v=4"
},
{
"type": "User",
"login": "ukgodzuki",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/240904750?v=4"
},
{
"type": "User",
"login": "Seldaek",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/183678?v=4"
}
],
"contributors_sampled": 36,
"top_contributor_share": 0.351
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"phpcs.xml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"composer.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 2/10 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca8c3670a6d04f6c08ef23561ee4de71c86f2f87",
"ran_at": "2026-07-22T05:49:36Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T00:46:30Z",
"oldest_open_prs": [
{
"number": 101,
"created_at": "2022-08-23T11:18:30Z",
"last_comment_at": "2022-09-23T14:02:34Z",
"last_comment_author": "vaimo-wilko"
},
{
"number": 158,
"created_at": "2026-07-20T19:29:31Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-12T07:52:49Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 25,
"created_at": "2019-03-28T12:52:48Z",
"last_comment_at": "2024-07-09T10:23:58Z",
"last_comment_author": "peterjaap"
},
{
"number": 40,
"created_at": "2019-09-29T19:38:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2019-10-22T08:44:24Z",
"last_comment_at": "2019-10-23T07:21:56Z",
"last_comment_author": "allanpaiste"
},
{
"number": 46,
"created_at": "2019-11-06T10:36:54Z",
"last_comment_at": "2021-03-19T15:21:54Z",
"last_comment_author": "allanpaiste"
},
{
"number": 50,
"created_at": "2019-11-21T15:31:55Z",
"last_comment_at": "2019-11-22T09:22:32Z",
"last_comment_author": "4n70w4"
},
{
"number": 52,
"created_at": "2020-01-16T22:03:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 54,
"created_at": "2020-02-26T21:27:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2020-03-12T14:04:51Z",
"last_comment_at": "2020-05-22T11:57:23Z",
"last_comment_author": "allanpaiste"
},
{
"number": 57,
"created_at": "2020-03-16T07:42:23Z",
"last_comment_at": "2020-03-17T20:08:02Z",
"last_comment_author": "allanpaiste"
},
{
"number": 60,
"created_at": "2020-09-16T07:30:37Z",
"last_comment_at": "2020-09-28T08:20:36Z",
"last_comment_author": "allanpaiste"
},
{
"number": 61,
"created_at": "2020-10-22T12:01:40Z",
"last_comment_at": "2023-02-21T09:54:24Z",
"last_comment_author": "michaelarnauts"
},
{
"number": 64,
"created_at": "2021-02-04T13:11:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 66,
"created_at": "2021-02-05T07:59:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 68,
"created_at": "2021-02-17T15:54:33Z",
"last_comment_at": "2021-02-23T08:32:19Z",
"last_comment_author": "ihor-sviziev"
},
{
"number": 69,
"created_at": "2021-02-22T11:29:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 71,
"created_at": "2021-02-24T01:45:34Z",
"last_comment_at": "2021-02-25T07:59:20Z",
"last_comment_author": "allanpaiste"
},
{
"number": 72,
"created_at": "2021-02-24T11:22:56Z",
"last_comment_at": "2021-02-25T19:39:14Z",
"last_comment_author": "allanpaiste"
},
{
"number": 76,
"created_at": "2021-03-09T19:09:12Z",
"last_comment_at": "2021-04-13T20:57:12Z",
"last_comment_author": "chelevich"
},
{
"number": 77,
"created_at": "2021-03-19T15:47:03Z",
"last_comment_at": "2021-03-20T08:25:14Z",
"last_comment_author": "allanpaiste"
},
{
"number": 78,
"created_at": "2021-04-30T17:46:23Z",
"last_comment_at": "2022-05-17T21:49:15Z",
"last_comment_author": "djacques4gorilla"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/vaimo/composer-patches",
"host": "github.com",
"name": "composer-patches",
"owner": "vaimo"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 57,
"vitality": 77,
"community": 60,
"governance": 71,
"engineering": 84
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 77,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"commits_last_year": 40,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "40 commits in the last year",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 40
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 65,
"latest_release_tag": "5.6.1",
"releases_from_tags": false,
"days_since_latest_release": 39,
"mean_days_between_releases": 37
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "65 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 65
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 39 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 39
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~37 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 37
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 39,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 39 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 39
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"forks": 45,
"stars": 304,
"watchers": 8,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "304 stars",
"points": 40.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 304
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "45 forks",
"points": 13.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 45
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"packages": [
"vaimo/composer-patches"
],
"dependents": 23,
"ecosystems": "packagist",
"total_downloads": 4670819,
"monthly_downloads": 91770
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "91,770 downloads/month across packagist",
"points": 66.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 91770,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "23 packages depend on it",
"points": 9.2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 23
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 71,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 36,
"top_contributor_share": 0.351
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 35% of commits",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 35
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "36 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 36
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"merged_prs": 58,
"open_issues": 31,
"closed_issues": 52,
"issue_closed_ratio": 0.627,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "63% of issues closed",
"points": 29.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 63
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/73 decided PRs merged",
"points": 30.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 73
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/10 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 41,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "vaimo",
"public_repos": 117,
"account_age_days": 5251
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "41 followers of vaimo",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 41,
"login": "vaimo"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "117 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 117
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"vaimo/composer-patches"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 39
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 39 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 39
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "204 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 204
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 84,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpcs.xml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"composer",
"maintenance",
"constraints",
"patching",
"patcher",
"patches",
"applier",
"composer-plugin",
"plugin",
"composer-commands",
"patch-extension",
"composer-packages",
"composer-extension"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 57,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/10 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 49 resolved dependencies against OSV; 5 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 49
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 5
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 3,
"affected_packages": 1,
"assessed_packages": 49,
"unassessed_packages": 5,
"affected_by_severity": "high 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 49,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 41,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.56,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "56 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 29.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 56,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"composer.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpcs.xml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 13259,
"source_files_sampled": 170,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/170 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 170,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T05:50:02.169683Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/vaimo/composer-patches.svg",
"full_name": "vaimo/composer-patches",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with vaimo/composer-patches. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
