Публічний реєстрПомірний
Звіт про здоров'я програмного забезпеченнясхема 0.26.0 · метрики 1.13.0 · 2026-07-22 16:52 UTC
composer / xdebug-handler
Restart a CLI process without loading the xdebug extension.
composer/xdebug-handler має індекс здоров’я 61 зі 100, що відповідає смузі «Помірний». Найвищий показник — Community & Adoption (70/100), найнижчий — AI Readiness (30/100). Останнє оновлення було 20 днів тому. Більшість нещодавньої роботи виконує один учасник.
61
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
61
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Власність
ComposerОрганізація
577 підписників21 публічний репозиторійз черв. 2011 р.
За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.
Пакетні екосистеми
| Реєстр | Пакет | Версія | Завантажень / міс | Версії | Остання публікація | Теги |
|---|---|---|---|---|---|---|
| Packagist | composer/xdebug-handler | 3.0.5 | 8 811 111 | 27 | 807 днів тому | performancexdebug |
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
51
Активність розробки
50Помірний
Як обчислюється оцінка
| 28.8/36 | Свіжість push — останній push 20 дн. тому |
| 5.5/36 | Ритм комітів — 8/52 тижнів із комітами |
| 10.3/18 | Обсяг комітів — 13 комітів за останній рік |
| 5/10 | OpenSSF Scorecard: Maintained — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
Використані вхідні дані
| commits_last_year | 13 |
| human_commit_share | 0,94 |
| days_since_last_push | 20 |
| active_weeks_last_year | 8 |
Дисципліна релізів
52Помірний
Як обчислюється оцінка
| 27/27 | Випускає релізи — опубліковано 27 релізів |
| 0/36 | Свіжість релізів — останній реліз 806 дн. тому |
| 19.8/27 | Ритм релізів — реліз кожні ~112,2 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
Використані вхідні дані
| releases_count | 27 |
| latest_release_tag | 3.0.5 |
| releases_from_tags | ні |
| days_since_latest_release | 806 |
| mean_days_between_releases | 112,2 |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
70
Популярність і впровадження
72Добрий
Як обчислюється оцінка
| 55.3/60 | Зірки — 2 566 зірок |
| 12.5/25 | Форки — 33 форків |
| 4.7/15 | Спостерігачі — 8 спостерігачів |
Використані вхідні дані
| forks | 33 |
| stars | 2 566 |
| watchers | 8 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Здоров'я спільноти
50Помірний
Як обчислюється оцінка
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (MIT) |
| 0/18 | Настанови CONTRIBUTING |
| 0/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | так |
| has_license | так |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | ні |
| has_pull_request_template | ні |
Впровадження в екосистемі (завантаження)
93Відмінний
Як обчислюється оцінка
| 80/80 | Щомісячні завантаження — 8 811 111 завантажень/місяць у packagist |
| 13.1/20 | Залежні пакети в реєстрі — залежних пакетів: 90 |
Використані вхідні дані
| packages | composer/xdebug-handler |
| dependents | 90 |
| ecosystems | packagist |
| total_downloads | 427 944 000 |
| monthly_downloads | 8 811 111 |
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
64
Стійкість мейнтейнерів (бас-фактор)
36У зоні ризику
Як обчислюється оцінка
| 9/54 | Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів |
| 3.9/22.5 | Розподіл комітів — головний контриб’ютор — автор 83% комітів |
| 13.5/13.5 | Широта контриб’юторів — 20 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 7 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 1 |
| contributors_sampled | 20 |
| top_contributor_share | 0,828 |
Реактивність на issue та PR
84Добрий
Як обчислюється оцінка
| 46.8/46.8 | Вирішення issue — закрито 100% issue |
| 33.9/38.3 | Прийняття PR — злито 116/131 вирішених PR |
| 3/15 | OpenSSF Scorecard: Code-Review — Found 4/17 approved changesets -- score normalized to 2 |
Використані вхідні дані
| merged_prs | 116 |
| open_issues | 0 |
| closed_issues | 37 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 15 |
Власність та опіка
72Добрий
Як обчислюється оцінка
| 30/30 | Підтримка власника — у власності організації |
| 0/20 | Верифікований домен |
| 19.9/25 | Охоплення власника — 577 підписників у composer |
| 21.8/25 | Послужний список — 21 публічних репозиторіїв, вік облікового запису ~15 р. |
Використані вхідні дані
| followers | 577 |
| owner_type | Organization |
| is_verified | — |
| owner_login | composer |
| public_repos | 21 |
| account_age_days | 5 523 |
Супровід пакетів
69Помірний
Як обчислюється оцінка
| 25/25 | Опубліковано й доступно — 1 пакет(ів) у packagist |
| 4/35 | Свіжість публікацій — остання публікація 807 дн. тому |
| 20/20 | Історія версій — 27 опублікованих версій |
| 20/20 | Не застарілий — активний, не deprecated і не yanked |
Використані вхідні дані
| packages | composer/xdebug-handler |
| ecosystems | packagist |
| any_deprecated | ні |
| min_days_since_publish | 807 |
Інженерна якість
Чи наявні базові інженерні практики та документація?
60
Інженерні практики
66Помірний
Як обчислюється оцінка
| 24/24 | Процеси CI — 5 процес(ів) CI |
| 24/24 | Наявні тести |
| 0/16 | Конфігурація лінтера |
| 0/9.6 | Pre-commit-хуки |
| 6.4/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard: CI-Tests — 7 out of 11 merged PRs checked by a CI test -- score normalized to 6 |
Використані вхідні дані
| has_ci | так |
| has_tests | так |
| has_editorconfig | так |
| has_linter_config | ні |
| has_precommit_config | ні |
Документація
50Помірний
Як обчислюється оцінка
| 30/30 | README |
| 0/25 | Каталог документації |
| 0/15 | Сайт документації / домашня сторінка |
| 10/10 | Опис репозиторію |
| 10/10 | Теми — 4 тем |
| 0/10 | Wiki |
Використані вхідні дані
| topics | xdebug, php, restart, performance |
| has_wiki | ні |
| homepage | — |
| has_readme | так |
| has_docs_dir | ні |
| has_description | так |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
62
Стан безпеки
62Помірний
Як обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — немає даних |
| 1.5/2.5 | CI-Tests — 7 out of 11 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 1.5/7.5 | Code-Review — Found 4/17 approved changesets -- score normalized to 2 |
| 2.5/2.5 | Contributors — project has 7 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — немає даних |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 3.8/7.5 | Maintained — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 0/5 | Packaging — немає даних |
| 0/5 | Pinned-Dependencies — немає даних |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — немає даних |
| 0/7.5 | Token-Permissions — немає даних |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 6,2 |
Виключено з оцінювання (немає даних або не застосовно): branch_protection, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Залишкові ваги перенормовано.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
30
Контекст і настанови для агентів
14Критичний
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 14.2/40 | Читабельна історія комітів — намір зазначено у 25 з 94 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,266 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Цикл верифікації (збірка / тести / перевірка типів)
33У зоні ризику
Як обчислюється оцінка
| 0/18 | Розгортання однією командою |
| 22/22 | Автоматизовані тести |
| 0/11 | Конфігурація лінтера / форматера |
| 0/11 | Статична перевірка типів |
| 0/10 | Відтворюване середовище |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 8/8 | Автоматизоване супроводження — 6 з останніх 100 комітів — автоматичні оновлення залежностей |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — немає даних |
Використані вхідні дані
| has_nix | ні |
| has_tests | так |
| lockfiles | — |
| has_dockerfile | ні |
| typed_language | ні |
| bootstrap_files | — |
| has_devcontainer | ні |
| has_linter_config | ні |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0,06 |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Pinned-Dependencies. Залишкові ваги перенормовано.
Читабельність коду для моделей
55Помірний
Як обчислюється оцінка
| 0/45 | Типізований код — PHP без конфігурації перевірки типів |
| 55/55 | Керовані розміри файлів — 0/43 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | PHP |
| largest_source_bytes | 21 739 |
| source_files_sampled | 43 |
| oversized_source_files | 0 |
Ключові факти
2 566зірок GitHub
20контриб'юторів
13комітів за останні 12 місяців
20днів від останнього пушу
27релізів
1бас-фактор
0відкритих issue
Packagistпакетних екосистем
Попередження щодо збору даних
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
Докладніше
Історія зірок і форків 0 ★ / 33 ⇿
0Зірки
33Форки
27Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 3Мінорні 4Патчі 20
Кожна точка охоплює 8 днів.
OpenSSF Scorecard 6.2 / 10
6.2сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| н/д | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 6 | CI-Tests | 7 out of 11 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 2 | Code-Review | Found 4/17 approved changesets -- score normalized to 2 |
| 10 | Contributors | project has 7 contributing companies or organizations |
| н/д | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 5 | Maintained | 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| н/д | Packaging | packaging workflow not detected |
| н/д | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 9 | Security-Policy | security policy file detected |
| н/д | Signed-Releases | no releases found |
| н/д | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Прямі залежності 1
| Реєстр | Пакет | Обмеження версії | Маніфест |
|---|---|---|---|
| Packagist | psr/log | ^1 || ^2 || ^3 | composer.json |
Усі залежності 6
Повний розв'язаний набір залежностей із графа залежностей GitHub: 1 прямих і 5 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|---|---|---|
| Packagist | psr/log | — | пряма |
| Packagist | composer/pcre | — | непряма |
| Packagist | php | — | непряма |
| Packagist | phpstan/phpstan | — | непряма |
| Packagist | phpstan/phpstan-strict-rules | — | непряма |
| Packagist | phpunit/phpunit | — | непряма |
Сповіщення про залежності не оцінено
Звірка сповіщень не відбулася для цього звіту: No resolved dependencies carried a version and a supported ecosystem
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"xdebug",
"php",
"restart",
"performance"
],
"is_fork": false,
"size_kb": 381,
"has_wiki": false,
"homepage": null,
"languages": {
"PHP": 124992
},
"pushed_at": "2026-07-02T08:16:16Z",
"created_at": "2017-11-22T12:18:41Z",
"owner_type": "Organization",
"updated_at": "2026-07-02T08:16:17Z",
"description": "Restart a CLI process without loading the xdebug extension.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://getcomposer.org/",
"name": "Composer",
"type": "Organization",
"login": "composer",
"company": null,
"location": "Germany",
"followers": 577,
"avatar_url": "https://avatars.githubusercontent.com/u/837015?v=4",
"created_at": "2011-06-08T08:38:20Z",
"is_verified": null,
"public_repos": 21,
"account_age_days": 5523
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "3.0.5",
"kind": "patch",
"published_at": "2024-05-06T17:03:18Z"
},
{
"tag": "3.0.4",
"kind": "patch",
"published_at": "2024-03-26T18:37:50Z"
},
{
"tag": "3.0.3",
"kind": "patch",
"published_at": "2022-02-25T21:45:57Z"
},
{
"tag": "3.0.2",
"kind": "patch",
"published_at": "2022-02-24T21:07:25Z"
},
{
"tag": "2.0.5",
"kind": "patch",
"published_at": "2022-02-24T20:41:14Z"
},
{
"tag": "3.0.1",
"kind": "patch",
"published_at": "2022-01-04T18:38:44Z"
},
{
"tag": "2.0.4",
"kind": "patch",
"published_at": "2022-01-04T18:35:02Z"
},
{
"tag": "3.0.0",
"kind": "major",
"published_at": "2021-12-23T21:18:08Z"
},
{
"tag": "2.0.3",
"kind": "patch",
"published_at": "2021-12-08T13:30:18Z"
},
{
"tag": "2.0.2",
"kind": "patch",
"published_at": "2021-07-31T17:12:06Z"
},
{
"tag": "2.0.1",
"kind": "patch",
"published_at": "2021-05-05T19:43:56Z"
},
{
"tag": "2.0.0",
"kind": "major",
"published_at": "2021-04-09T20:34:19Z"
},
{
"tag": "1.4.6",
"kind": "patch",
"published_at": "2021-03-25T17:39:50Z"
},
{
"tag": "1.4.5",
"kind": "patch",
"published_at": "2020-11-13T08:04:41Z"
},
{
"tag": "1.4.4",
"kind": "patch",
"published_at": "2020-10-24T12:55:38Z"
},
{
"tag": "1.4.3",
"kind": "patch",
"published_at": "2020-08-19T10:38:14Z"
},
{
"tag": "1.4.2",
"kind": "patch",
"published_at": "2020-06-04T11:24:09Z"
},
{
"tag": "1.4.1",
"kind": "patch",
"published_at": "2020-03-01T12:36:09Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2019-11-06T16:47:24Z"
},
{
"tag": "1.3.3",
"kind": "patch",
"published_at": "2019-05-27T17:59:32Z"
},
{
"tag": "1.3.2",
"kind": "patch",
"published_at": "2019-01-28T20:32:23Z"
},
{
"tag": "1.3.1",
"kind": "patch",
"published_at": "2018-11-29T11:17:00Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2018-08-31T19:13:56Z"
},
{
"tag": "1.2.1",
"kind": "patch",
"published_at": "2018-08-23T12:07:13Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2018-08-16T11:09:35Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2018-04-11T15:54:08Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2018-03-08T14:26:29Z"
}
],
"recent_commits": [
{
"oid": "5c6ba736fca3ec682a1115eacb0240f18cf835c2",
"body": "…ns/checkout-7.0.0\n\nBump actions/checkout from 6.0.2 to 7.0.0",
"is_bot": false,
"headline": "Merge pull request #168 from composer/dependabot/github_actions/actio…",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2026-07-02T08:16:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5e8c5440e7812aefc3b02afdc7393139ce1e3b3",
"body": "…mmathur/setup-php-2.37.2\n\nBump shivammathur/setup-php from 2.37.1 to 2.37.2",
"is_bot": false,
"headline": "Merge pull request #166 from composer/dependabot/github_actions/shiva…",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2026-07-02T08:16:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63aa3d51003c85af95e47521c9520a3c9cbc6d4e",
"body": "…rcore/zizmor-action-0.5.7\n\nBump zizmorcore/zizmor-action from 0.5.6 to 0.5.7",
"is_bot": false,
"headline": "Merge pull request #167 from composer/dependabot/github_actions/zizmo…",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2026-07-02T08:16:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84d058b0c4dc0467245d155475400cfc878e2c17",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T04:24:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f2a480e32a35da48298d1cddf668007c6944f8ae",
"body": "Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.6 to 0.5.7.\n- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)\n- [Commits](https://github.com/zizmorcore/zizmor-action/compare/5f14fd08f7cf1cb1609c1e344975f152c7ee938d...192e21d79ab29983730a13\n[…]\nency-name: zizmorcore/zizmor-action\n dependency-version: 0.5.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T04:24:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5c4a4803db78960b3280117db0f123fd0b01840",
"body": "Bumps [shivammathur/setup-php](https://github.com/shivammathur/setup-php) from 2.37.1 to 2.37.2.\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/compare/7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc...f3e473d116dcccaddc5834248c87\n[…]\ndency-name: shivammathur/setup-php\n dependency-version: 2.37.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump shivammathur/setup-php from 2.37.1 to 2.37.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T04:24:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a7dcec27c2a796ac7949e568e89410d725fa81b",
"body": "* Add zizmor GitHub Actions security analysis + dependabot cooldown\n\n* Harden existing workflows to pass zizmor (pedantic)\n\nPin actions to commit SHAs (latest releases), add concurrency limits, and set persist-credentials: false on read-only checkouts.",
"is_bot": false,
"headline": "Add zizmor security analysis + dependabot cooldown (#165)",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2026-05-29T13:38:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88787b8668d6e4f671e23ef7871b8caaa71b212c",
"body": "Bumps [ramsey/composer-install](https://github.com/ramsey/composer-install) from 3 to 4.\n- [Release notes](https://github.com/ramsey/composer-install/releases)\n- [Commits](https://github.com/ramsey/composer-install/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: ramsey/composer-instal\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump ramsey/composer-install from 3 to 4 (#164)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-01T11:30:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b635b4a4166089101eebc74e869aa480acfb549c",
"body": "…ns/checkout-6\n\nBump actions/checkout from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #160 from composer/dependabot/github_actions/actio…",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2025-12-03T10:21:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1afb2364eb81aa92670ee9b58c1ae3cceee84c95",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-01T04:24:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc9636c261928c36d3b6ee445c09a0026d76b2d5",
"body": "…ns/checkout-5\n\nBump actions/checkout from 4 to 5",
"is_bot": false,
"headline": "Merge pull request #159 from composer/dependabot/github_actions/actio…",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2025-09-03T06:55:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61aebfbdb32767f475d83de66b20774bcdd52258",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v5)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '5'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-01T10:04:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc7fd08122f34b91e948705d3878becebf63099b",
"body": null,
"is_bot": false,
"headline": "Fix tests and update for PHP 8.5",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2025-08-13T15:57:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b919b82441351d9c8450b8051e6cdac12df40b29",
"body": null,
"is_bot": false,
"headline": "Update CI",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2024-08-27T15:04:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1949bc061387ee90771b289944624c5ada4e9ed",
"body": null,
"is_bot": false,
"headline": "Enable dependabot",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2024-08-22T14:11:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c1925561632e83d60a44492e0b344cf48ab85ef",
"body": null,
"is_bot": false,
"headline": "Prepare 3.0.5",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-05-06T16:37:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "925e4445685ae679d06fe52dd8db55da34b8dab4",
"body": null,
"is_bot": false,
"headline": "Check if PHP_BINARY is available",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-05-06T14:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f988f8fdf580d53bdb2d1278fe93d1ed5462255",
"body": null,
"is_bot": false,
"headline": "Prepare 3.0.4",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-26T18:29:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f312abafc46a9079c8ed7faf2070c06a79180503",
"body": null,
"is_bot": false,
"headline": "Document using functional test scripts (#153)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-26T16:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b92607a5d07e550fdb0d8d044fee3acb0eed3f2",
"body": null,
"is_bot": false,
"headline": "Add functional tests",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-26T13:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da886fc18844605a7b136064b96bfa8a11539669",
"body": null,
"is_bot": false,
"headline": "Show debug restart command as an array or string",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-21T10:46:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6282b170d12034a2ac8bf69e60ba1a2d07cf0f66",
"body": null,
"is_bot": false,
"headline": "Refactor prepareRestart to make it more robust",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-20T11:16:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "075553375c6c8d4675734a89aee3746ab1826769",
"body": null,
"is_bot": false,
"headline": "Use PHPUnit directly",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-18T14:30:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04aaa11b75af42dfbbe24ae6dd20f1fec01c794d",
"body": null,
"is_bot": false,
"headline": "Update github actions",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-16T17:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0504b36f8e4e8d8b07173d5d4de67d3933ed2ed",
"body": null,
"is_bot": false,
"headline": "Fix phpstan issues",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2024-03-16T15:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aef0a617342775c939da61e96fd4c80d1bfe3e82",
"body": "Adapt to recent version of PHPUnit (10)",
"is_bot": false,
"headline": "Merge pull request #151 from DavidPrevot/phpunit",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2023-06-21T15:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ded326ed3eb3744aeb314cdb4ecfa77ad63563e3",
"body": null,
"is_bot": false,
"headline": "Adapt to recent version of PHPUnit (10)",
"author_name": "David Prévot",
"author_login": "DavidPrevot",
"committed_at": "2023-05-28T15:19:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf19e3380ffd84cea4a2cbfcc599ea07ef01f18a",
"body": "composer.json: Update IRC Support link",
"is_bot": false,
"headline": "Merge pull request #149 from reedy/patch-1",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2023-01-13T15:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f3947d00de23debba561735cfd1551904529000",
"body": "Updated the same as [17b972f2a9068349a9f72cf45d2c5a518f058b76](https://github.com/composer/composer/commit/17b972f2a9068349a9f72cf45d2c5a518f058b76)",
"is_bot": false,
"headline": "composer.json: Update IRC Support link",
"author_name": "Sam Reed",
"author_login": "reedy",
"committed_at": "2023-01-08T23:56:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "888f7bd51aa7ceb0dc402e3602c947f180ad8de8",
"body": null,
"is_bot": false,
"headline": "Updates for PHPUnit 10",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-11-30T13:23:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "853ddb3b964c4aa086000b14a47917936654f956",
"body": null,
"is_bot": false,
"headline": "Ensure getAllIniFiles returns a non-empty array",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-11-18T17:35:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2328f2e289a7bc8c60e7a71473bd5b7709366331",
"body": null,
"is_bot": false,
"headline": "Fix errors from phpstan",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-11-18T13:34:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19e7e68ab24c3f923c0e014b8e3f6eae5fa49be9",
"body": null,
"is_bot": false,
"headline": "Update actions",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-11-18T12:31:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced299686f41dce890debac69273b47ffe98a40c",
"body": null,
"is_bot": false,
"headline": "Prepare 3.0.3",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-02-25T21:32:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbab621e9e36af70c61d478bc9f8759ade70a06f",
"body": null,
"is_bot": false,
"headline": "Allow all major versions of composer/pcre",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-02-25T20:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a63450502d919cc9da6d46ad9232fed805a67ab",
"body": "…ot depend on PREG_UNMATCHED_AS_NULL",
"is_bot": false,
"headline": "Allow all major versions of composer/pcre given the usage here does n…",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2022-02-25T20:28:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b11b961ef6b11e380e81a20b27c8cad54eeefe61",
"body": null,
"is_bot": false,
"headline": "Prepare 3.0.2",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-02-24T20:53:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75d2b5cb9fa88d0513101c4ed137b4d4d075faf8",
"body": null,
"is_bot": false,
"headline": "Fixed regression in 3.0.1 affecting Xdebug 2",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-02-24T20:49:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bc5bed041f304a6238b346bca5d244834388abe",
"body": null,
"is_bot": false,
"headline": "Fix README badge versions and links",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-01-05T14:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32add73e3a87f4af1bfe2072abb951ae18a0cdea",
"body": null,
"is_bot": false,
"headline": "Prevent workflow runs on documentation changes",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-01-05T14:42:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12f1b79476638a5615ed00ea6adbb269cec96fd8",
"body": null,
"is_bot": false,
"headline": "Prepare 3.0.1",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-01-04T18:29:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "157e4f2464e7c4159cf79bdd97de7300cf96c20c",
"body": null,
"is_bot": false,
"headline": "Fix isXdebugActive if used before instantiation",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2022-01-04T18:05:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec6aa897c8b6cab05ebaeddade62bb6e4a69ef38",
"body": null,
"is_bot": false,
"headline": "Prepare 3.0.0",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T21:03:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e93fd13700ce10cda212beb6e809de3e27aa746",
"body": null,
"is_bot": false,
"headline": "Document version 2 long term support",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T18:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "166142bd9a3ecf899b5c334c32bb3dec85ba2828",
"body": null,
"is_bot": false,
"headline": "Allow flexibilty in CI unit test runner",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T18:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce991ac8eee5b582a0fe788e7829df3373fe2a2c",
"body": null,
"is_bot": false,
"headline": "Update documentation",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T11:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16057ba1b91ab467588bc2a461a3c2942dbcb693",
"body": null,
"is_bot": false,
"headline": "Add strict types",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T11:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c65440a6596aa9e32f764f3de8ea156f6d2c5138",
"body": null,
"is_bot": false,
"headline": "Use modern phpunit asserts",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T11:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "207d6e85fd7708f71856e53d0e6e8f13cf803ac7",
"body": null,
"is_bot": false,
"headline": "Use modern array syntax",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T11:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "228d9d73c4fd849bdadc9035fa1911442e435afc",
"body": null,
"is_bot": false,
"headline": "Change minimum PHP to 7.2.5",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-23T11:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6555461e76962fd0379c444c46fd558a0fcfb65e",
"body": null,
"is_bot": false,
"headline": "Prepare 2.0.3",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-08T13:07:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "838d794364cdc1ee006e9404c5801fdfd02b445d",
"body": null,
"is_bot": false,
"headline": "Updates for phpstan strict rules",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-08T13:00:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8672dcbdf8c461e8b55c22f9f69d8621d7c6040",
"body": null,
"is_bot": false,
"headline": "Updates for phpstan level 9",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-12-08T11:06:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2ac09baeb3ac5303fcce85a28c94828021bcdbf",
"body": "Note that the removal of the version check (>= 5.3.6) for\n`DEBUG_BACKTRACE_IGNORE_ARGS` is safe, because we have already bailed on\nPHP < 5.4.",
"is_bot": false,
"headline": "Updates for phpstan level 7",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-11-30T18:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917b1faa187e5fbab10f02b184fd5cf9cdb702d5",
"body": null,
"is_bot": false,
"headline": "Annotate and modify src for phpstan level 6",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-11-30T16:35:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "610ff21831555cb445d42656603bbc2c658d0f95",
"body": null,
"is_bot": false,
"headline": "Make tests pass higher phpstan levels",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-11-30T11:04:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5dfaeaa34fc28143c463c32d32e96858c61d76f",
"body": null,
"is_bot": false,
"headline": "Update PHP versions in workflows",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-11-28T16:18:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "703c466a75233bfbf5aad220440d6271a9bf84c6",
"body": null,
"is_bot": false,
"headline": "Put tests into dedicated namespace",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-11-28T16:00:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a1164341621f9beafa2c2fca3bac0b49f5d7655",
"body": null,
"is_bot": false,
"headline": "Update deps and fix phpstan errors",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-11-28T15:48:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84674dd3a7575ba617f5a76d7e9e29a7d3891339",
"body": null,
"is_bot": false,
"headline": "Prepare 2.0.2",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-07-31T17:03:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccacbcdd93a8d11af8baa15bb0e5eefd319123e6",
"body": null,
"is_bot": false,
"headline": "Use xdebug_info to get mode in Xdebug-3.1",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-07-31T16:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b226b9a69fe2ca0075b96dc39bfe8b661637360",
"body": null,
"is_bot": false,
"headline": "Work around phpstan errors",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-07-29T18:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff6db176806b9a50469e83c0589cc332de0d0781",
"body": "Signed-off-by: Alexander M. Turek <me@derrabus.de>",
"is_bot": false,
"headline": "Allow psr/log 2 and 3",
"author_name": "Alexander M. Turek",
"author_login": "derrabus",
"committed_at": "2021-07-29T18:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e16b05caffa35579f2edafc3b79cc61e4934cd6f",
"body": null,
"is_bot": false,
"headline": "Remove ini directives below PATH and HOST sections (#133)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-05-30T20:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964adcdd3a28bf9ed5d9ac6450064e0d71ed7496",
"body": null,
"is_bot": false,
"headline": "Prepare 2.0.1",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-05-05T19:37:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf8876434e47f6e734f018447e7cbff775b6c752",
"body": "Do not restart with cmd.exe if cwd is a UNC path",
"is_bot": false,
"headline": "Merge pull request #129 from johnstevenson/unc-paths",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-05-05T09:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "718af7ee0fae04058adcf4174c88911bccbc03b5",
"body": null,
"is_bot": false,
"headline": "Fix deprecation test error on PHP8.1",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-05-05T09:19:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6abc8f9ab5d71297732d7195bc0c6e15431bb11e",
"body": "cmd.exe does not support a UNC path as the working directory and will\nchange it to the Windows directory before executing any command. We\nbypass cmd.exe on PHP 7.4+ by calling the php binary directly so this\nonly affects earlier versions.",
"is_bot": false,
"headline": "Do not restart with cmd.exe if cwd is a UNC path",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-05-04T16:28:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31d57697eb1971712a08031cfaff5a846d10bdf5",
"body": null,
"is_bot": false,
"headline": "Prepare 2.0.0",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-09T19:40:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0bd1935ec1949ab4d65cc654c25fc937bf8392e",
"body": null,
"is_bot": false,
"headline": "Improve caching and tidy actions",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-09T16:55:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7c5ea8da5d78f3b068ad3166c9eddcf10efa95f",
"body": null,
"is_bot": false,
"headline": "Fix phpstan when using simple-phpunit (#128)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-09T16:45:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88ad83270eb9c9b9cf5453009ab33432ef59a6dd",
"body": null,
"is_bot": false,
"headline": "Update .gitattributes",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-08T16:08:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61e11f49ee0f96727393bc95f872f02f3e68683e",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-07T15:22:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15858b3b84618898739d8e1738a53e8f4a675774",
"body": "These don't really add anything helpful.",
"is_bot": false,
"headline": "Remove signal-handling notifications",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-06T20:37:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "468e12fc38c668e4f70f55a233bbf5f9a04f2f9f",
"body": null,
"is_bot": false,
"headline": "Use phpversion to get Xdebug version",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-06T20:35:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5b171d4c079200032f5eebf2cb002b0105720eb",
"body": "Removes @internal annotation to make utility methods safely available.\r\nThey are already being copied or used by some implementations.",
"is_bot": false,
"headline": "Open up Process class (#127)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-06T19:19:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1a99f0c16601a5d110af59f24a9fba83aaf8b7b",
"body": "Xdebug3 introduces specific modes and mode `off` adds minimal overhead\r\nto the process. Mode discovery is best-attempt and will be solved when\r\nXdebug provides a specific function.\r\n\r\nA static helper method `isXdebugActive()` is provided to determine if\r\nXdebug is loaded and running in an active mode.",
"is_bot": false,
"headline": "Do not restart if xdebug mode is off (#126)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-06T11:48:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60d759504c15fb7b40394c57e24ff5e08cb7b3fc",
"body": null,
"is_bot": false,
"headline": "Don't typehint restart for 1.x compatibility (#124)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-04-01T20:34:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d496bdb0ebe353e65d753390a056409a506c28fe",
"body": "Color option was required when `passthru` was being used to force\r\ndecorated output in the piped child process. But by using `proc_open`\r\nwith an empty `$descriptorspec` (to simulate passthru), the original\r\nfile descriptors are inherited by the child which can determine if\r\nstdout is a tty.",
"is_bot": false,
"headline": "Remove color option (#123)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-29T11:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a9ae2a4c27c74f4655f148271704e86a4b6509c",
"body": "In PHP-7.4 `proc_open` accepts an array of command-line options which\r\nare automatically quoted for the OS. This enables the shell to be\r\nbypassed and the php process to be called directly for the restart.\r\n\r\nThis feature is used if available, otherwise the command-line is quoted\r\nas before. Support for `passthru` has been dropped to make life simpler.",
"is_bot": false,
"headline": "Bypass shell when restarting in PHP 7.4+ (#122)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-26T20:43:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f27e06cd9675801df441b3656569b328e04aa37c",
"body": null,
"is_bot": false,
"headline": "Prepare 1.4.6",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-25T17:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bc65bd7558edc5875b5cb73feccf4d812a6ffdc",
"body": null,
"is_bot": false,
"headline": "Update CI badges to Github actions",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-23T20:27:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b2c80bcf0ab92f836c151096982207a8b727385",
"body": null,
"is_bot": false,
"headline": "Remove Windows console limitation in README",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-16T18:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cd7b79403e82e8cecb1ea9951e8f44b3aa281d2",
"body": "Windows console event handling can be problematic because CTRL+C signals\r\nmay be disabled and this is inherited by child processes. Also there is\r\nno `pcntl_signal_get_handler` equivalent in Windows PHP, so it is\r\nimpossible to know if signals are enabled or if a handler has been\r\nregistered.\r\n\r\nWhe\n[…]\nansfer CTRL handling to the restarted\r\nprocess, we register a handler in the parent that doesn't do anything -\r\nresulting in any existing handler being overwritten and the suppression\r\nof CTRL events.",
"is_bot": false,
"headline": "Add Windows CTRL event handling on PHP 7.4+ (#121)",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-15T20:13:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "088f0f753605ba7484820481d0c2490860694cde",
"body": null,
"is_bot": false,
"headline": "Minor tweaks",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2021-03-09T15:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "293d0acdec19a01b664cabb216f84834d25312df",
"body": null,
"is_bot": false,
"headline": "Config check for proc_open and passthru",
"author_name": "Tom Klingenberg",
"author_login": "ktomk",
"committed_at": "2021-03-09T15:05:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "349d487b71ba5abd9e1a3570e7d2286366fe7b76",
"body": null,
"is_bot": false,
"headline": "Migrate appveyor to GH actions as well",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2020-12-09T10:38:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f842d52bdb8a925c42afee803e5ae86a669f77e",
"body": null,
"is_bot": false,
"headline": "Make sure a default timezone is set",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2020-12-09T10:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cb857908ba3cd84a2e6de56db1a33bc35c9eaea",
"body": null,
"is_bot": false,
"headline": "Remove travis config",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2020-12-09T10:22:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8569aba45a8de226de4a3ff3c899afdb0aeb8680",
"body": null,
"is_bot": false,
"headline": "Migrate to GH actions, add phpstan",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2020-12-09T10:22:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f28d44c286812c714741478d968104c5e604a1d4",
"body": null,
"is_bot": false,
"headline": "Update changelog",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2020-11-13T08:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6611fd7af090fb5fcf3986f2e8995b1f3f64077",
"body": "Tweak proc_open and fix Windows command",
"is_bot": false,
"headline": "Merge pull request #116 from johnstevenson/proc-open",
"author_name": "Jordi Boggiano",
"author_login": "Seldaek",
"committed_at": "2020-11-13T07:10:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a7c84364bb48f4611af1f068333b4d1bbb47807",
"body": null,
"is_bot": false,
"headline": "Tweak proc_open and fix Windows command",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2020-11-12T20:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f748184fed8dce2a3d4f16bed2859bac0f506799",
"body": "* Use proc_open() over passthru() if available, tasks #112\r\n\r\nCo-authored-by: Jordi Boggiano <j.boggiano@seld.be>\r\n\r\n* More tweaks, docs\r\n\r\nCo-authored-by: Jordi Boggiano <j.boggiano@seld.be>",
"is_bot": false,
"headline": "Use proc_open() over passthru() if available, tasks #112 (#113)",
"author_name": "Tom Klingenberg",
"author_login": "ktomk",
"committed_at": "2020-11-12T16:46:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e076a124f7ee146f2487554a94b6a19a74887ba",
"body": null,
"is_bot": false,
"headline": "Prepare 1.4.4",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2020-10-24T12:39:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8c66e882a103c2bf509e396e27a0ca98a3882f8",
"body": "Fix Exception if 'pcntl_signal' is disabled",
"is_bot": false,
"headline": "Merge pull request #111 from mrtnmtth/master",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2020-09-28T19:49:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91213b36cdc1d903835352ffd9956450d0ea5337",
"body": null,
"is_bot": false,
"headline": "Fix Exception if 'pcntl_signal' is disabled",
"author_name": "Martin Matthaei",
"author_login": null,
"committed_at": "2020-09-23T16:16:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebd27a9866ae8254e873866f795491f02418c5a5",
"body": null,
"is_bot": false,
"headline": "Prepare 1.4.3",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2020-08-19T10:27:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f492f61c874bc36bd117970e8191fd46fd318b1",
"body": "Fix signal handling in the restarted process",
"is_bot": false,
"headline": "Merge pull request #110 from johnstevenson/signals",
"author_name": "John Stevenson",
"author_login": "johnstevenson",
"committed_at": "2020-08-18T17:56:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70b5e40061bc8d494995dc92fcb7201233e85aba",
"body": null,
"is_bot": false,
"headline": "Fix signal handling in the restarted process",
"author_name": "johnstevenson",
"author_login": "johnstevenson",
"committed_at": "2020-08-18T16:01:43Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 27,
"commits_last_year": 13,
"latest_release_at": "2024-05-06T17:03:18Z",
"latest_release_tag": "3.0.5",
"releases_from_tags": false,
"days_since_last_push": 20,
"active_weeks_last_year": 8,
"days_since_latest_release": 806,
"mean_days_between_releases": 112.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "composer/xdebug-handler",
"exists": true,
"license": "MIT",
"keywords": [
"performance",
"Xdebug"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/composer/xdebug-handler",
"is_deprecated": false,
"latest_version": "3.0.5",
"repository_url": "https://github.com/composer/xdebug-handler",
"versions_count": 27,
"total_downloads": 427944000,
"dependents_count": 90,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 8811111,
"first_published_at": null,
"latest_published_at": "2024-05-06T16:37:16Z",
"latest_version_yanked": null,
"days_since_latest_publish": 807
}
]
},
"popularity": {
"forks": 33,
"stars": 2566,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2017-11-22",
"count": 1
},
{
"date": "2017-11-30",
"count": 1
},
{
"date": "2017-12-19",
"count": 1
},
{
"date": "2018-01-18",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-06",
"count": 1
},
{
"date": "2018-03-22",
"count": 1
},
{
"date": "2018-04-19",
"count": 1
},
{
"date": "2018-06-05",
"count": 1
},
{
"date": "2018-07-11",
"count": 1
},
{
"date": "2018-08-19",
"count": 1
},
{
"date": "2019-05-16",
"count": 1
},
{
"date": "2019-05-20",
"count": 1
},
{
"date": "2019-07-08",
"count": 1
},
{
"date": "2019-07-18",
"count": 1
},
{
"date": "2019-11-03",
"count": 1
},
{
"date": "2020-02-13",
"count": 1
},
{
"date": "2020-04-05",
"count": 1
},
{
"date": "2020-05-22",
"count": 1
},
{
"date": "2020-11-11",
"count": 1
},
{
"date": "2020-12-08",
"count": 1
},
{
"date": "2021-07-10",
"count": 1
},
{
"date": "2021-07-15",
"count": 1
},
{
"date": "2021-07-18",
"count": 1
},
{
"date": "2022-02-10",
"count": 1
},
{
"date": "2022-03-15",
"count": 1
},
{
"date": "2023-01-08",
"count": 1
},
{
"date": "2023-01-27",
"count": 1
},
{
"date": "2023-03-23",
"count": 1
},
{
"date": "2023-05-28",
"count": 1
},
{
"date": "2023-12-15",
"count": 1
},
{
"date": "2026-02-25",
"count": 1
}
],
"complete": true,
"collected": 32,
"total_forks": 33
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 21739,
"source_files_sampled": 43,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 6,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "psr/log",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1 || ^2 || ^3"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "psr/log",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/pcre",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan-strict-rules",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 6,
"direct_count": 1,
"indirect_count": 5
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 116,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 37,
"closed_unmerged_prs": 15
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "johnstevenson",
"commits": 236,
"avatar_url": "https://avatars.githubusercontent.com/u/881777?v=4"
},
{
"type": "User",
"login": "Seldaek",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/183678?v=4"
},
{
"type": "User",
"login": "felixfbecker",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/10532611?v=4"
},
{
"type": "User",
"login": "alcohol",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/21414?v=4"
},
{
"type": "User",
"login": "keradus",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/2716794?v=4"
},
{
"type": "User",
"login": "carusogabriel",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/16328050?v=4"
},
{
"type": "User",
"login": "theofidry",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/5175937?v=4"
},
{
"type": "User",
"login": "ktomk",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/352517?v=4"
},
{
"type": "User",
"login": "TysonAndre",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1904430?v=4"
},
{
"type": "User",
"login": "sidz",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1302230?v=4"
}
],
"contributors_sampled": 20,
"top_contributor_share": 0.828
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"continuous-integration.yml",
"functional.yml",
"lint.yml",
"phpstan.yml",
"zizmor.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "7 out of 11 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 4/17 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 7 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "5c6ba736fca3ec682a1115eacb0240f18cf835c2",
"ran_at": "2026-07-22T16:51:55Z",
"aggregate_score": 6.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-02T08:16:24Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-02T08:16:09Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/composer/xdebug-handler",
"host": "github.com",
"name": "xdebug-handler",
"owner": "composer"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 62,
"vitality": 51,
"community": 70,
"governance": 64,
"engineering": 60
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 51,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"commits_last_year": 13,
"human_commit_share": 0.94,
"days_since_last_push": 20,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 20 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 20
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "13 commits in the last year",
"points": 10.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 13
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"releases_count": 27,
"latest_release_tag": "3.0.5",
"releases_from_tags": false,
"days_since_latest_release": 806,
"mean_days_between_releases": 112.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "27 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 27
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 806 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 806
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~112.2 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 112.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 20,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 20 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 20
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 70,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"forks": 33,
"stars": 2566,
"watchers": 8,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2,566 stars",
"points": 55.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 2566
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "33 forks",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 33
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 93,
"inputs": {
"packages": [
"composer/xdebug-handler"
],
"dependents": 90,
"ecosystems": "packagist",
"total_downloads": 427944000,
"monthly_downloads": 8811111
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "8,811,111 downloads/month across packagist",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 8811111,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "90 packages depend on it",
"points": 13.1,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 90
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 20,
"top_contributor_share": 0.828
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 83% of commits",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 83
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "20 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 20
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"merged_prs": 116,
"open_issues": 0,
"closed_issues": 37,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "116/131 decided PRs merged",
"points": 33.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 116,
"decided": 131
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/17 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 577,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "composer",
"public_repos": 21,
"account_age_days": 5523
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "577 followers of composer",
"points": 19.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 577,
"login": "composer"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "21 public repos, account ~15 yr old",
"points": 21.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 21
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "moderate",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"composer/xdebug-handler"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 807
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 807 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 807
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "27 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 27
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 11 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"xdebug",
"php",
"restart",
"performance"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 62,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 6.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 11 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/17 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 24
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 30,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 14,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.266,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "25 of 94 human commits state their intent (structured subject or explanatory body)",
"points": 14.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 25,
"sampled": 94
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.06
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "6 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 21739,
"source_files_sampled": 43,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/43 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 43,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T16:52:17.088966Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/composer/xdebug-handler.svg",
"full_name": "composer/xdebug-handler",
"license_state": "standard",
"license_spdx": "MIT"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.26.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — Packagist.