公开记录中等
软件健康报告模式 0.26.0 · 指标 1.13.0 · 2026-07-22 17:20 UTC
php-parallel-lint / PHP-Console-Highlighter
Highlight PHP code in terminal
php-parallel-lint/PHP-Console-Highlighter 的健康指数为 100 分中的 57 分，处于「中等」区间。 其得分最高的类别是Community & Adoption（63/100），最低的是AI Readiness（38/100）。 最近一次更新在 1 天前。 近期的大部分工作由 1 位贡献者完成。
57
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
57
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Packagist | php-parallel-lint/php-console-highlighter | v1.0.0 | 830,551 | 8 | 1615 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
49
开发活跃度
58中等
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 1 天前 |
| 7.6/36 | 提交节奏 — 52 周中有 11 周有提交 |
| 11.9/18 | 提交量 — 最近一年 20 次提交 |
| 2/10 | OpenSSF Scorecard：Maintained — 3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2 |
所用输入
| commits_last_year | 20 |
| human_commit_share | 0.88 |
| days_since_last_push | 1 |
| active_weeks_last_year | 11 |
发布纪律
36存在风险
评分方式
| 27/27 | 有发布版本 — 已发布 2 个发布版本 |
| 0/36 | 发布时效 — 最近一次发布版本于 1,615 天前 |
| 5.4/27 | 发布节奏 — 约每 646.2 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 2 |
| latest_release_tag | v1.0.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 1,615 |
| mean_days_between_releases | 646.2 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
63
流行度与采用
39存在风险
评分方式
| 31.5/60 | 星标 — 88 个星标 |
| 5.8/25 | 复刻 — 6 个复刻 |
| 1.7/15 | 关注者 — 3 位关注者 |
所用输入
| forks | 6 |
| stars | 88 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
65中等
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（MIT） |
| 0/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 否 |
生态采用（下载量）
98优秀
评分方式
| 78.9/80 | 月度下载量 — packagist 合计每月 830,551 次下载 |
| 18.7/20 | 注册表被依赖数 — 631 个软件包依赖它 |
所用输入
| packages | php-parallel-lint/php-console-highlighter |
| dependents | 631 |
| ecosystems | packagist |
| total_downloads | 32,681,328 |
| monthly_downloads | 830,551 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
63
维护者韧性（巴士系数）
43存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 10.7/22.5 | 提交分布 — 头号贡献者编写了 52% 的提交 |
| 13.5/13.5 | 贡献者广度 — 11 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 7 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 11 |
| top_contributor_share | 0.523 |
议题与 PR 响应能力
92优秀
评分方式
| 46.8/46.8 | 议题解决 — 100% 的议题已关闭 |
| 36.6/38.3 | PR 接受 — 已裁定的 PR 中 67/70 已合并 |
| 9/15 | OpenSSF Scorecard：Code-Review — Found 10/15 approved changesets -- score normalized to 6 |
所用输入
| merged_prs | 67 |
| open_issues | 0 |
| closed_issues | 9 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 3 |
所有权与托管责任
53中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 5/25 | 所有者影响力 — php-parallel-lint 有 4 位关注者 |
| 18.2/25 | 既往记录 — 6 个公开仓库，账户约 6 年 |
所用输入
| followers | 4 |
| owner_type | Organization |
| is_verified | — |
| owner_login | php-parallel-lint |
| public_repos | 6 |
| account_age_days | 2,352 |
软件包维护
69中等
评分方式
| 25/25 | 已发布且可解析 — packagist 上有 1 个软件包 |
| 4/35 | 发布时效 — 最近一次发布于 1,615 天前 |
| 20/20 | 版本历史 — 8 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | php-parallel-lint/php-console-highlighter |
| ecosystems | packagist |
| any_deprecated | 否 |
| min_days_since_publish | 1,615 |
工程质量
基础的工程与文档实践是否到位？
52
工程实践
60中等
评分方式
| 24/24 | CI 工作流 — 2 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard：CI-Tests — 18 out of 26 merged PRs checked by a CI test -- score normalized to 6 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
40存在风险
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 0/15 | 文档 / 主页站点 |
| 10/10 | 仓库描述 |
| 0/10 | 主题标签 |
| 0/10 | Wiki |
所用输入
| topics | — |
| has_wiki | 否 |
| homepage | — |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
59
安全态势
59中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — 无数据 |
| 1.5/2.5 | CI-Tests — 18 out of 26 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 10/15 approved changesets -- score normalized to 6 |
| 2.5/2.5 | Contributors — project has 7 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — 无数据 |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 1.5/7.5 | Maintained — 3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2 |
| 0/5 | Packaging — 无数据 |
| 0/5 | Pinned-Dependencies — 无数据 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 2/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — 无数据 |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 5.9 |
已排除计分（无数据或不适用）：branch_protection, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions。 其余权重已重新归一化。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
38
AI 代理上下文与指引
36存在风险
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 36.4/40 | 可读的提交历史 — 88 次人类提交中有 60 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.682 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
验证循环（构建 / 测试 / 类型检查）
33存在风险
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 0/11 | 静态类型检查 |
| 0/10 | 可复现环境 |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 12 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — 无数据 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 否 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.12 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Pinned-Dependencies。 其余权重已重新归一化。
面向模型的代码可读性
55中等
评分方式
| 0/45 | 可类型检查的代码 — PHP，未配置类型检查 |
| 55/55 | 可控的文件大小 — 采样的 10 个源文件中有 0 个超过 60KB |
所用输入
| primary_language | PHP |
| largest_source_bytes | 22,757 |
| source_files_sampled | 10 |
| oversized_source_files | 0 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
88GitHub 星标
11贡献者
20最近 12 个月提交数
1距最近推送天数
2发布版本数
1巴士系数（bus factor）
0开放议题
Packagist软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
更多细节
Star 与 Fork 历史 0 ★ / 6 ⇿
0Star
6Fork
2发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 1次版本 0修订 0
每个点涵盖 5 天。
OpenSSF Scorecard 5.9 / 10
5.9综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 不适用 | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 6 | CI-Tests | 18 out of 26 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 10/15 approved changesets -- score normalized to 6 |
| 10 | Contributors | project has 7 contributing companies or organizations |
| 不适用 | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 2 | Maintained | 3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2 |
| 不适用 | Packaging | packaging workflow not detected |
| 不适用 | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 4 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 不适用 | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
全部依赖 7
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 7 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| Packagist | ext-tokenizer | — | 间接 |
| Packagist | php | — | 间接 |
| Packagist | php-parallel-lint/php-code-style | — | 间接 |
| Packagist | php-parallel-lint/php-console-color | — | 间接 |
| Packagist | php-parallel-lint/php-parallel-lint | — | 间接 |
| Packagist | php-parallel-lint/php-var-dump-check | — | 间接 |
| Packagist | phpunit/phpunit | — | 间接 |
依赖安全公告 未评估
本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 115,
"has_wiki": false,
"homepage": null,
"languages": {
"PHP": 49409
},
"pushed_at": "2026-07-21T02:21:33Z",
"created_at": "2020-02-12T08:27:08Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T02:21:36Z",
"description": "Highlight PHP code in terminal",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": null,
"name": "PHP Parallel lint",
"type": "Organization",
"login": "php-parallel-lint",
"company": null,
"location": null,
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/60956977?v=4",
"created_at": "2020-02-12T05:46:50Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 2352
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2022-02-18T12:18:33Z"
},
{
"tag": "v0.5",
"kind": "other",
"published_at": "2020-05-13T07:40:15Z"
}
],
"recent_commits": [
{
"oid": "fc2739deea29c9e1bc5dbcc85b204b8086955e07",
"body": "Bumps the action-runners group with 1 update: [actions/checkout](https://github.com/actions/checkout).\n\n\nUpdates `actions/checkout` from 7.0.0 to 7.0.1\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits\n[…]\n\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: action-runners\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump actions/checkout in the action-runners group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T02:21:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "265bfb2e3b21e65954dbf029dec80a088ddd66c7",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump actions/checkout from 6.0.2 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T00:44:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d28ec9921b70e34286bb48a65f2234cdf47a091f",
"body": "Bumps the action-runners group with 1 update in the / directory: [shivammathur/setup-php](https://github.com/shivammathur/setup-php).\n\n\nUpdates `shivammathur/setup-php` from 2.37.0 to 2.37.2\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivamma\n[…]\n dependency-version: 2.37.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: action-runners\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump shivammathur/setup-php",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T01:04:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f0a78c7c5a54c0ca539f4f6cbfe3df8779542a0",
"body": "Bumps [ramsey/composer-install](https://github.com/ramsey/composer-install) from 3.1.1 to 4.0.0.\n- [Release notes](https://github.com/ramsey/composer-install/releases)\n- [Commits](https://github.com/ramsey/composer-install/compare/3cf229dc2919194e9e36783941438d17239e8520...65e4f84970763564f46a70b8a5\n[…]\ndency-name: ramsey/composer-install\n dependency-version: 4.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump ramsey/composer-install from 3.1.1 to 4.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-21T00:06:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6cb068b53212b104f5c487df0d2062e5918ac000",
"body": "Bumps the action-runners group with 1 update: [shivammathur/setup-php](https://github.com/shivammathur/setup-php).\n\n\nUpdates `shivammathur/setup-php` from 2.36.0 to 2.37.0\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/comp\n[…]\n dependency-version: 2.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: action-runners\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump shivammathur/setup-php in the action-runners group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-21T00:05:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed38cbab0f3d6e92f534c3031ce87b014ae06243",
"body": "> By default, using `actions/checkout` causes a credential to be persisted in the checked-out repo's `.git/config`, so that subsequent `git` operations can be authenticated.\n>\n> Subsequent steps may accidentally publicly persist `.git/config`, e.g. by including it in a publicly accessible artifact v\n[…]\n `persist-credentials: true`.\n\nThis has now been addressed in all workflows.\n\nRefs:\n* https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens/\n* https://docs.zizmor.sh/audits/#artipacked",
"is_bot": false,
"headline": "GH Actions: do not persist credentials",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2026-01-26T03:54:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03d178cc3264ae7ba8e5a94a97bc013f6198daf1",
"body": ":point_right: Important: this is for **version** updates only, not for security updates, which are handled separately and don't depend on this configuration.\n\n---\n\nPR 64 updated the GitHub Actions workflows used in this repo to use \"pinned\" versions for external action runners to improve workflow se\n[…]\nshould be mostly empty (as long as it's not a Monday), which should mean that if I apply this same change to all repos I am involved with, all these Dependabot PRs should come in around the same time.",
"is_bot": false,
"headline": "Dependabot/gh-actions: move to bi-weekly schedule",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2026-01-26T03:51:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c72689f280d4ab151b4a4bc0f18583df1ad7d8f6",
"body": "... which is expected to be released this Thursday.\n\n* Builds against PHP 8.5 are no longer allowed to fail.\n* Update PHP version on which code coverage is run (high should now be 8.5).\n* Add _allowed to fail_ build against PHP 8.6.",
"is_bot": false,
"headline": "GH Actions: update for the release of PHP 8.5",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2026-01-26T03:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9f4eb3fdef999f0da58271356e8457ea0ac6d2c",
"body": "The `poser.pugx.org` isn't working half the time and broken badges do not look good.",
"is_bot": false,
"headline": "README: fix a badge",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2026-01-26T03:50:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b395bfdbcb5372bcfb9870144ebe9138da71867",
"body": "... as they give a quick overview of the status of the project, so having them at the top makes more sense than having them at the bottom of the README.",
"is_bot": false,
"headline": "README: have badges at top of doc",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2026-01-26T03:50:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3afc9bdb65364a0fa8e717991848483a9f6d46f3",
"body": "Bumps the action-runners group with 1 update: [actions/checkout](https://github.com/actions/checkout).\n\n\nUpdates `actions/checkout` from 6.0.1 to 6.0.2\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits\n[…]\n\n dependency-version: 6.0.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: action-runners\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump actions/checkout in the action-runners group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-26T03:48:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4535e5b485e4b6db594c154e32358da2971d9ea0",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/93cb6efe18208431cddfb83\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump actions/checkout from 5.0.1 to 6.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-08T19:28:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0257c4c480e69c1c1dbc5af1537bd851943d1d15",
"body": "Bumps the action-runners group with 1 update: [shivammathur/setup-php](https://github.com/shivammathur/setup-php).\n\n\nUpdates `shivammathur/setup-php` from 2.35.5 to 2.36.0\n- [Release notes](https://github.com/shivammathur/setup-php/releases)\n- [Commits](https://github.com/shivammathur/setup-php/comp\n[…]\n dependency-version: 2.36.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: action-runners\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump shivammathur/setup-php in the action-runners group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-08T19:19:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b0aa87a373dfa2c1ad19299ee39426b940dcccd",
"body": "Bumps the action-runners group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [coverallsapp/github-action](https://github.com/coverallsapp/github-action).\n\n\nUpdates `actions/checkout` from 5.0.0 to 5.0.1\n- [Release notes](https://github.com/actions/checkout/releases)\n- [\n[…]\n\n dependency-version: 2.3.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: action-runners\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump the action-runners group with 2 updates",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-11-18T18:55:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "335e26174ca8cab84d53148388ac7b9a17b3449d",
"body": null,
"is_bot": false,
"headline": "GH Actions/test: ensure all jobs have a name",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2025-10-18T06:49:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2286d55cda7b342f4a4f98342cb5cd502067dc7b",
"body": "This commit makes the following change to the Dependabot config:\n* It introduces a \"group\".\n By default Dependabot raises individual PRs for each update. Now, it will group updates to new minor or patch release for all action runners into a single PR.\n Updates to new major releases of action r\n[…]\nen/code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates\n* https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference",
"is_bot": false,
"headline": "Dependabot: update config",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2025-10-18T06:46:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e30b6398196cc80aa253786dfc40ccc1abcd201",
"body": "Recently there has been more and more focus on securing GH Actions workflows - in part due to some incidents.\n\nThe problem with \"unpinned\" action runners is as follows:\n* Tags are mutable, which means that a tag could point to a safe commit today, but to a malicious commit tomorrow.\n Note that Gi\n[…]\nvidual PRs per action runner.\n2. A workflow to automatically merge Dependabot PRs as long as CI passes.\n\nRef: https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions",
"is_bot": false,
"headline": "GH Actions: \"pin\" all action runners",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2025-10-18T06:46:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "578a3dd0fd2d03f1ee39269784f3317d62613b2b",
"body": "Add `display_startup_errors=On` as per the current recommendation from PHPUnit.\n\nRef: https://github.com/sebastianbergmann/phpunit-documentation-english/commit/b3b159cbe9bd7eb5656dd381fc6f028549601dce",
"is_bot": false,
"headline": "GH Actions: update PHP ini configuration",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2025-09-14T09:41:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68cf19bafa5fd56da5cd4cdeedce46ccccb279e7",
"body": "…sible()\n\nSince PHP 8.1, calling the `Reflection*::setAccessible()` methods is no longer necessary as reflected properties/methods/etc will always be accessible.\nHowever, the method calls are still needed for PHP < 8.1.\n\nAs of PHP 8.5, calling the `Reflection*::setAccessible()` methods is now formal\n[…]\nan, this would need to be \"fixed\" again come PHP 9.0, while the current solution should be stable, including for PHP 9.0.\n\nRef: https://wiki.php.net/rfc/deprecations_php_8_5#extreflection_deprecations",
"is_bot": false,
"headline": "PHP 8.5 | Tests: prevent deprecation notice for Reflection*::setAcces…",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2025-09-14T09:36:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42ff7456b5475d7e529926a59d70dfb846c393e7",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v5)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '5'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump actions/checkout from 4 to 5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-14T09:22:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d1752deb805261b5e7519a4c3c3b1db19e539f2",
"body": "* Builds against PHP 8.4 are no longer allowed to fail.\n* Add _allowed to fail_ build against PHP 8.5.\n\nRef: https://www.php.net/releases/8.4/en.php",
"is_bot": false,
"headline": "GH Actions: PHP 8.4 has been released",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2024-11-23T12:12:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9d050d8a6272f5af027cfe91bafe1afa01eaa3",
"body": null,
"is_bot": false,
"headline": "Composer: avoid writing a lock file",
"author_name": "Dan Wallis",
"author_login": null,
"committed_at": "2024-04-24T17:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8ec9a67a7a2977f7d8639d29c5a87d370a51308",
"body": "The PHPunit configuration file specification has undergone changes in PHPUnit 9.3, 10.0 and 10.1.\n\nMost notably:\n* In PHPUnit 9.3, the manner of specifying the code coverage configuration has changed.\n* In PHPUnit 10.0, a significant number of attributes of the `<phpunit>` element were removed or re\n[…]\n/sebastianbergmann/phpunit/blob/main/ChangeLog-10.0.md#1000---2023-02-03\n* sebastianbergmann/phpunit 5196\n* https://github.com/sebastianbergmann/phpunit/commit/fb6673f06ef90b43667b7187722e2c840dcdb573",
"is_bot": false,
"headline": "PHPUnit: allow for PHPUnit 10 + add separate configuration",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2024-04-10T11:32:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "769f5acc63705580f7671f29b1725cf2fca31a4a",
"body": "As of PHPUnit 10, data providers are (again) expected to be `static` methods.\n\nThis updates the test suite to respect that.\n\nIncludes removing the use of `$this` from select data providers.\n\nRefs:\n* https://github.com/sebastianbergmann/phpunit/commit/9caafe2d49b33a21f87db248a8ad6ca7c7bdac09\n* sebastianbergmann/phpunit 5100",
"is_bot": false,
"headline": "Tests: make dataproviders `static`",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2024-04-10T11:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f2d6ccefec190bd4877efe8436b8434b69ad187",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump actions/checkout from 3 to 4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T07:56:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c0455871036accbebeb421d9132b14771411f20",
"body": "Bumps [ramsey/composer-install](https://github.com/ramsey/composer-install) from 2 to 3.\n- [Release notes](https://github.com/ramsey/composer-install/releases)\n- [Commits](https://github.com/ramsey/composer-install/compare/v2...v3)\n\n---\nupdated-dependencies:\n- dependency-name: ramsey/composer-install\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "GH Actions: Bump ramsey/composer-install from 2 to 3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-04-09T07:55:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "523c0adfed7f5ba4f4fd6f9834d1853b16061dea",
"body": "The Package author still only mentioned \"Jakub Onderka\", while in reality other contributors should get credit for the work they have put in.\n\nThis is a relatively simple way to provide better credits.",
"is_bot": false,
"headline": "Composer: give credit where credit is due",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2024-04-09T07:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8522211ef23fd708558df50899dbce36967c5f5",
"body": "Simplify the code coverage workflow by removing the dependency on the `php-coveralls/php-coveralls` package and switching to the `coverallsapp/github-action` action runner, which, as of the release of the [0.6.5 version of the Coverage Reporter](https://github.com/coverallsapp/coverage-reporter/releases/tag/v0.6.5) now natively supports the Clover format.",
"is_bot": false,
"headline": "GH Actions: switch to Coveralls action runner to upload reports",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2024-04-09T07:54:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11bb8fc9a242410ebde7622d9a1a055001f969b1",
"body": "... which is expected later today.",
"is_bot": false,
"headline": "GH Actions: update for the release of PHP 8.3",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2024-04-09T07:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b797524fba5529441c654c4e231a226bcde06a5",
"body": "... as the old URLs are no longer valid.",
"is_bot": false,
"headline": "GH Actions: update a few links in inline comments",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2023-11-23T02:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dc05c0d01a322d7ff8af3d673c6e663da0747b0",
"body": "PHP-Coveralls 2.6.0 has just been released and includes a fix for the last known PHP 8.x issue.\n\nThis means that it should now be safe to install php-coveralls on PHP 8.x and upload from there, which means we now only need the work-around for the PHP version when on PHP < 5.5 (as Coveralls v1 does not work with GH Actions).\n\nRef:\n* https://github.com/php-coveralls/php-coveralls/releases/tag/v2.6.0",
"is_bot": false,
"headline": "GH Actions: update for php-coveralls 2.6.0",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2023-11-23T02:44:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d90fe850102ba15094313600c27fe91f4e211ed",
"body": "The `coverallsapp/github-action` action runner has (finally) created a named branch for the 1.x series, so let's use that.\n\nRef: https://github.com/coverallsapp/github-action/issues/100",
"is_bot": false,
"headline": "GH Actions: used a named branch for coverallsapp",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2023-11-23T02:44:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "822770289381c4c1e9d08ed7df5249ec375df5ad",
"body": "This commit adds an initial Dependabot configuration to:\n* Submit pull requests for security updates and version updates for GH Action runner dependencies.\n\nAt a later point in time, we could consider enabling it for Composer dependencies as well.\n\nThe configuration has been set up to:\n* Run weekly \n[…]\nconfiguration-options-for-the-dependabot.yml-file\n* https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#versioning-strategy",
"is_bot": false,
"headline": "Add dependabot configuration file",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2023-09-23T16:03:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db8811bbde409eeb40ce4fbaaae7e4c56be1a6a8",
"body": "Caches used in GH Actions do not get updated, they can only be replaced by a different cache with a different cache key.\n\nNow the predefined Composer install action this repo is using already creates a pretty comprehensive cache key:\n\n> `ramsey/composer-install` will auto-generate a cache key which \n[…]\nm-cache-suffix` option for all relevant workflows in this repo.\n\nRefs:\n* https://github.com/ramsey/composer-install/#custom-cache-suffix\n* https://github.com/ramsey/composer-install/releases/tag/2.2.0",
"is_bot": false,
"headline": "GH Actions: bust the cache semi-regularly",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-12-11T02:12:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37344e5acaef899565f5fb2053cb54de13dcca3a",
"body": "PHP 8.2 has been released today :tada: and the `setup-php` action has announced support for PHP 8.3, so adding PHP 8.3 to the matrix and no longer allowing PHP 8.2 to fail the build.\n\nBuilds against PHP 8.3 are still allowed to fail for now.\n\nIncludes minor tweak setting PHP to `latest` for tasks where the PHP version isn't that relevant.",
"is_bot": false,
"headline": "GH Actions: update PHP versions in workflows",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-12-11T00:24:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4151921d16c29e281c275f9d06f106503c3ec347",
"body": "GitHub has deprecated the use of `set-output` (and `set-state`) in favour of new environment files.\n\nThis commit updates workflows to use the new methodology.\n\nRefs:\n* https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/\n* https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#environment-files",
"is_bot": false,
"headline": "GH Actions: fix use of deprecated `set-output`",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-10-31T14:01:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "425985e7a7b9d8eb08a8de5197641bbf5289a925",
"body": "If there is a ruleset error, the `cs2pr` action doesn't receive an `xml` report and exits with a `0` error code, even though the PHPCS run failed (though not on CS errors, but on a ruleset error).\n\nThis changes the GH Actions workflow to allow for that situation and still fail the build in that case.",
"is_bot": false,
"headline": "GH Actions: harden the workflow against PHPCS ruleset errors",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-10-31T13:57:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a0074ab4dc7e0021278ebd127f80c4f005b0612",
"body": "A number of predefined actions have had major release, which warrant an update to the workflow(s).\n\nThese updates don't actually contain any changed functionality, they are mostly just a change of the Node version used by the action itself (from Node 14 to Node 16).\n\nRefs:\n* https://github.com/actions/checkout/releases",
"is_bot": false,
"headline": "GH Actions: version update for various predefined actions",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-03-07T05:13:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac65da75bc540b5d0a44250176c939d2af4a5865",
"body": "Noticed two things when I did the release:\n* One entry should have been in \"fixed\", not \"changed\".\n* An empty pair of brackets.\n\nI've already fixed these up in the actual release.",
"is_bot": false,
"headline": "Changelog: minor touchup",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-21T13:07:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d18311edacd9d64574bebf4bc289f7aab4183f11",
"body": null,
"is_bot": false,
"headline": "GH Actions: Added support for code coverage with Coveralls.io",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2022-02-18T12:36:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b4803384d3303cf8e84141039ef56c8a123138d",
"body": "* Updated the changelog to include all changes currently merged and in the [1.0.0 milestone](https://github.com/php-parallel-lint/PHP-Console-Highlighter/milestone/1).\n* Simplified the changelog for the non-user facing changes.",
"is_bot": false,
"headline": "Release version 1.0.0",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-18T08:23:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3968028ea0079ab4d57a19ade531429c29dc70ed",
"body": null,
"is_bot": false,
"headline": "Tests: add dedicated tests for the `colorLines()` method",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T16:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e546692dd8b836eb09e625c50e3c48f99e1e2da",
"body": "…methods\n\nThese tests also test the `private` `getHighlightedLines()`, `splitToLines()` methods and - in part - the `lineNumbers()` method.",
"is_bot": false,
"headline": "Tests: add dedicated tests for the `getWholeFile[WithLineNumbers]()` …",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T12:11:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c43139c31fed219678db757d26f0407afe609559",
"body": null,
"is_bot": false,
"headline": "Tests: add a dedicated test for the class constructor",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T12:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d40f627f9d3f9d3c20554f88741e03b3c17ddd8b",
"body": "Fixes a wrong variable which would cause all builds branched off from the same branch `master` to be cancelled whenever a new branch was pushed, while the build cancelling should only act on a new push for the _actual_ branch pushed.",
"is_bot": false,
"headline": "GH Actions: fix build cancelling",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T11:58:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e51cb1273bc99d7707653c9bb5c4568f0f19214",
"body": "…of output\n\nThe `lineNumbers()` functionality adds a new line marker at the end of each line, including the last line, meaning that any code snippets being passed through this function will have a stray blank line at the end of the output.\n\nFixed now.",
"is_bot": false,
"headline": "Highlighter::lineNumbers(): bug fix - remove stray blank line at end …",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T11:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44defcaf03f47427daa1df6c6195f8fa34356b7",
"body": "…start of file\n\nWhen a code snippet in the middle of code is retrieved, the target snippet length calculation `$length = $linesAfter + $linesBefore + 1;` functions correctly, displaying the target line in the middle, padded by x number of lines before and after.\nGiven `$linesBefore` and `$linesAfter\n[…]\nd `$linesAfter` both being set to two, this currently displays as:\n```\ntarget\nafter\nafter\nafter\nafter\n```\n\n... while it should be:\n```\ntarget\nafter\nafter\n```\n\nThe change in this commit fixes this bug.",
"is_bot": false,
"headline": "Highlighter::getCodeSnippet(): bug fix - too many lines retrieved at …",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T11:16:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27dcb1d95d179d0db7d0efae16345b094e2e25b8",
"body": "These tests also test the `private` `getHighlightedLines()`, `splitToLines()` and `lineNumbers()` methods and the data sets in the data provider have been set up to ensure those methods are tested thoroughly.",
"is_bot": false,
"headline": "Tests: add dedicated tests for the `getCodeSnippet()` method",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T11:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90cfaccef58ffb986857b33d2cc6fbf987154774",
"body": "... from which all test classes should extend and which contains the `getConsoleColorMock()` method to prevent having to duplicate it in multiple places.\n\nThe method has been adjusted to be slightly more flexible for re-use, in that the `$withTheme` parameter can be used to determine whether the ConsoleColor class should behave as if themes have been registered or not.",
"is_bot": false,
"headline": "Tests: introduce base `HighlighterTestCase`",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-02-04T11:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fee9a68403bc770046e9ef5bedab1058acacff7",
"body": "The tests for this PR were failing after support for PHP 5.3 had been added back.\n\nReason being that the short PHP open echo tags `<?=` are only recognized as such with the ini setting `short_open_tag` turned on in PHP 5.3.\n\nI would normally add this to the matrix to do a complete test run with and \n[…]\n a little over the top.\n\nInstead this commit adds a tweak to the test workflow to turn that ini setting on for the PHP 5.3 test run.\n\nRef: https://www.php.net/manual/en/ini.core.php#ini.short-open-tag",
"is_bot": false,
"headline": "GH Actions: set `short_open_tag` ini setting for PHP 5.3 test run",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8af57597e4f48febe08e5e95031a8e69d652350a",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: add additional tests for keywords and operators",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8813effa5be1efadd101347359fe5fa06cfec989",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: move keyword test case to data provider",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec2964db8b042c92cef77e495e5f2131c182020b",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: move function call test cases to data provider",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fed200aef47cc65abe481c110dcb845e4f2ca33e",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: add test for inline HTML",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7f42043e0dd4f82182b8a70b19176fbb4547496",
"body": "This adds extra tests for:\n* Double quoted strings with interpolated variables.\n* Nowdoc\n* Heredocs with and without interpolated variables.\n\nNote: for the nowdoc and heredoc tests, the test input is put in single quotes to prevent \"nested here/nowdoc\", which could skew the tests.\nThese test cases also need to have a new line after the `;` as otherwise PHP does not tokenize these correctly (and the highlighter is not concerned with fixing incorrect tokenization of PHP itself).",
"is_bot": false,
"headline": "TokenizeTest: add additional test cases for text string handling",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa233c88438130ff79419f00bae33d9e40241272",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: move text string test cases to data provider",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2a200601421a9f65ac574cfc2172d64fed74877",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: add test cases for multi-line comments",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a174b58df1cbb74609e51adcb249764fe188a25",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: move comment token test cases to data provider",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d181d5f73c776327b0a8e8250b1655e6c609346",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: add dedicated test for a T_STRING type token",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3539d83f377e1ad1cab7d17b3325c550d4944fe6",
"body": null,
"is_bot": false,
"headline": "TokenizeTest: move miscellaneous token test cases to data provider",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18380d3dbff8c62dce4c9a4aad5d0676b9d368ed",
"body": "Note: this removes the looping from the test (which was a bad thing).\n\nAdvantages of using data providers compared to using a loop within the test function, are:\n1. When one of the \"test cases\" fails, the rest of the tests cases will still be run (not so when using a loop).\n This prevents one tes\n[…]\nhe test cases will now show (and be counted) as individual tests in progress reports and in testdox output.\n\nRef: https://phpunit.readthedocs.io/en/stable/writing-tests-for-phpunit.html#data-providers",
"is_bot": false,
"headline": "TokenizeTest: move magic constant test cases to data provider",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f6945543e1d9bedd6f164aac50f69a3c1e11fd7",
"body": "Note that the new test data uses NOWDOC format instead of HEREDOC format.",
"is_bot": false,
"headline": "TokenizeTest: add tests for PHP tags",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "522b8615b78c5fed4626858971bc6bf76cf034bf",
"body": "This sets up a new structure for this test class using test methods with data providers.\nAll other existing tests will be converted to data sets in data providers in follow on commits.",
"is_bot": false,
"headline": "TokenizeTest: move \"empty\" tests to new test setup with data providers",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68b2bf383625f5bba657e90bbd03bd07015be6c2",
"body": "For most tests, the text within the heredoc should _not_ be interpreted (interpolated). For those tests, it makes more sense to use nowdocs instead of heredocs.\n\nSimilar to single quoted versus double quoted strings, text within nowdocs is not interpolated (variables are not expanded), while within \n[…]\nite.\n\nRefs:\n* https://www.php.net/manual/en/language.types.string.php#language.types.string.syntax.heredoc\n* https://www.php.net/manual/en/language.types.string.php#language.types.string.syntax.nowdoc",
"is_bot": false,
"headline": "TokenizeTest: use nowdocs instead of heredocs",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3fec87fde3283658c86eb8b2cb1a47901ad06f54",
"body": "Realistically, all tests in the `HighligherTest` file are testing the handling of various token types and only incidentally testing the rest of the logic of the `Highlighter` class.\n\nWith that in mind, I'm proposing to rename the test file to make it more obvious what is being tested. This will then also allow for adding additional new test classes to test the rest of the functionality of the `Highlighter` class.\n\nIncludes adding minimal documentation and a minor method order tweak.",
"is_bot": false,
"headline": "Tests: rename the test class/file to `TokenizeTest`",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1c843c8c5bc2ccb8498b0ff7bbd67ea6e2fba07",
"body": "* Add more detailed basic test configuration\n* Unless `junit` is used somewhere, generating this report for code coverage is unnecessary.\n* Generating the text report, however, is useful.",
"is_bot": false,
"headline": "PHPUnit: improve configuration",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d4d01fb9cc811c544cc30ffd694a05c87f93386",
"body": "... as PHPUnit < 5.7.21 doesn't contain the forward compatibility layer with namespaced classes.",
"is_bot": false,
"headline": "Composer: improve PHPUnit version constraints",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2022-01-28T06:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9fb650ebda283727e8c2d0db70846a3484c5b6",
"body": "As Parallel Lint supports PHP 5.3 again since [PR 51](https://github.com/php-parallel-lint/PHP-Parallel-Lint/pull/51), it would be helpful for the Highlighter repo to also support PHP 5.3.\n\nThis restores the PHP 5.3 minimum version along the same lines as before the version drop in 02b6aa6ea32b14fc1\n[…]\ne Color minimum version for PHP 5.3.\n\nIncludes:\n* Enabling a build against PHP 5.3 in the GH Actions workflow.\n* Adjusting the `testVersion` for the PHPCompatibility checks to `5.3-` (5.3 and higher).",
"is_bot": false,
"headline": "Bring back support for PHP 5.3",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-30T10:29:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a16b2775b949b140a5047ea78c01c98b9a10508c",
"body": "The `dealerdirect/phpcodesniffer-composer-installer` Composer plugin is used to register external PHPCS standards with PHPCS.\n\nAs of Composer 2.2.0, Composer plugins need to be explicitly allowed to run. This adds the necessary configuration for that.\n\nRefs:\n* https://blog.packagist.com/composer-2-2/#more-secure-plugin-execution",
"is_bot": false,
"headline": "Composer: allow the PHPCS plugin",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-25T06:35:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ddc4809e8901df358b725d3837bbc5e69fb5beb",
"body": "The action used to install Composer packages and handle the caching has released a new major (and some follow-up patch releases), which means, the action reference needs to be updated to benefit from it.\n\nRefs:\n* https://github.com/ramsey/composer-install/releases/tag/2.0.0\n* https://github.com/ramsey/composer-install/releases/tag/2.0.1\n* https://github.com/ramsey/composer-install/releases/tag/2.0.2",
"is_bot": false,
"headline": "GH Actions: version update for `ramsey/composer-install`",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-25T06:28:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6e254a32b06be5840dd3082fe43f8c8003f07d6",
"body": "Rewrite the method to use predefined token lists.\n\nIncludes removing the PHPCS ruleset tweak put in place in an earlier commit.\n\nFixes 11",
"is_bot": false,
"headline": "Highlighter::getTokenType(): refactor to lower complexity",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-20T04:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d99c20485cd9e04e28cf62e9307f66524dcd26",
"body": "Fix up the issues which will be flagged by PHP-Code-Style 2.0 and explicitly ignore a couple of (non-)issues.\n\nIncludes no longer allowing warnings in the GH Actions build.",
"is_bot": false,
"headline": "CS: various minor fixes",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-20T04:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca5295a1296f528db583cb52f7f012b8730a562d",
"body": "* Scan all PHP files, not just the file in `src` for improved consistency across the code base, but exclude the `vendor` and the `build` (code coverage) directories.\n* Enable parallel scanning for faster results.\n* Use the ruleset from PHP-Code-Style by name.\n* Set the `testVersion` for use with PHPCompatibility.\n* Exclude the `LineLength` sniff for the tests.\n* Include minimal documentation in the ruleset.",
"is_bot": false,
"headline": "Ruleset: various tweaks for PHP-Code-Style 2.0",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-20T04:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1428e7aef2f77f0333746d9936a238f185e134f",
"body": "* Composer: require `php-parallel-lint/php-code-style` at 2.0 or higher.\n* Composer: remove the requirement for PHPCS. This will now be inherited from the code style repo.",
"is_bot": false,
"headline": "PHPCS: use PHP-Code-Style 2.0",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-20T04:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f514e9b00ef497f1e2024621bbf718ad2fa796b",
"body": "As this package has changed name and organisation, let's get this sorted.\n\nFixes 4",
"is_bot": false,
"headline": "Update namespace to PHP_Parallel_Lint",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-10T10:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c730cfd7722a36affcf2bec3d312933554824db",
"body": "* The PHP 8.0 tokenization change is a functional fix.\n* The dependency change from 12 only affects dev dependencies (as Console Color was updated again later in 17).",
"is_bot": false,
"headline": "Changelog: move two entries around",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3030552800ae1dd168ca6c1b1719feba16330acc",
"body": null,
"is_bot": false,
"headline": "Changelog: add missing tag links",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "481ec7f7e3cc5304645d6b6d46999746fffd63ff",
"body": null,
"is_bot": false,
"headline": "Changelog: add missing PR links for in \"unreleased\"",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9259a5a6b582714e68ea631c1f2a6aa517fd3403",
"body": "This helps to:\n1. Keep the changelog readable when editing the markdown and\n2. Removes the need to duplicate the links to contributors all over the place.",
"is_bot": false,
"headline": "Changelog: use link lists",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5699ea9db84a45317e83bc780bbf2b4dbdde846d",
"body": null,
"is_bot": false,
"headline": "Changelog: fix some typos",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b0d0da5c1ca21387d877d3b803cfc1d3c86912f",
"body": "PHP 8.1 was released the other week, so builds against PHP 8.1 should no longer be allowed to fail.",
"is_bot": false,
"headline": "GH Actions: PHP 8.1 is no longer allowed to fail",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50b7227d7915349fc581d1c888d1c406a93ec42a",
"body": "Follow up on 24\n\nDepending on the PHP version, `E_ALL` may not actual include all errors, so let's use `-1` instead which always will.\nAlso, let's enable `zend.assertions` in the ini settings as those may be used in tests.",
"is_bot": false,
"headline": "GH Actions/test workflow: further improve base ini values",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70c1dc2ee12e4a28fa0070e7fbea73a2326f9e02",
"body": "Previously, in Travis, when the same branch was pushed again and the \"Auto cancellation\" option on the \"Settings\" page had been turned on (as it was for most repos), any still running builds for the same branch would be stopped in favour of starting the build for the newly pushed version of the bran\n[…]\n https://github.blog/changelog/2021-04-19-github-actions-limit-workflow-run-or-job-concurrency/\n* https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions#concurrency",
"is_bot": false,
"headline": "GH Actions: auto-cancel previous builds for same branch",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:36:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a057cef5f7fca833256d12419666cfa190de903c",
"body": "PHPUnit just released version 9.5.10 and 8.5.21.\n\nThis contains a particular (IMO breaking) change:\n\n> * PHPUnit no longer converts PHP deprecations to exceptions by default (configure `convertDeprecationsToExceptions=\"true\"` to enable this)\n\nLet's unpack this:\n\nPreviously (PHPUnit < 9.5.10/8.5.21),\n[…]\nxceptions=\"true\"` to the PHPUnit configuration.\n\nRefs:\n* https://github.com/sebastianbergmann/phpunit/blob/9.5/ChangeLog-8.5.md\n* https://github.com/sebastianbergmann/phpunit/blob/9.5/ChangeLog-9.5.md",
"is_bot": false,
"headline": "PHPUnit: update configuration",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-12-07T03:35:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57a0bcb39d4f86f5beb34ad411bd5220a093e803",
"body": null,
"is_bot": false,
"headline": "Added github actions change to changelog",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2021-08-13T05:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1e1c48aed5468dbfa2b04920389a35f67971a6f",
"body": "Turns out the default setting for `error_reporting` used by the SetupPHP action is `error_reporting=E_ALL & ~E_DEPRECATED & ~E_STRICT` and `display_errors` is set to `Off`.\n\nFor the purposes of CI, I'd recommend running with `E_ALL` and `display_errors=On` to ensure **all** PHP notices are shown.",
"is_bot": false,
"headline": "GH Actions: set error reporting to E_ALL",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-08-13T05:44:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5377b3bcf2f4d5ad88b4829d5b4ac1e1f25001b3",
"body": null,
"is_bot": false,
"headline": "Added switch to Github Actions CI to changelog",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2021-05-08T16:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9ef13c896963fb5043c3709a8ad4e73096ab15f",
"body": "This commit:\n* Adds a GH Actions `cs` workflow for the code style and vardump checks which were previously run on Travis.\n These checks only need to run against one PHP version as the results will be the same independently of the PHP version these checks are run on.\n* Adds a GH Actions `test` wor\n[…]\nin the PR.\n* Removes the, now redundant, `.travis.yml` configuration.\n* Updates the `.gitattributes` file.\n* Updates the \"Build Status\" badge in the Readme to use the results from the GH Actions runs.",
"is_bot": false,
"headline": " CI: switch to GitHub Actions",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-05-08T16:48:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8343a8ba2f9ad9beb931081624e63c7895b37c70",
"body": "As this is a PHP project and the build steps are relatively simple, it will make it more intuitive for contributors to use Composer scripts to run CI checks, than to have to install Ant for this.\n\nThis commit creates the same build/CI scripts as were previously available via Ant in the Composer conf\n[…]\n to automatically determining whether the CLI used supports colourized output.\n As the determination of this in most tools has become pretty good, I, again, deemed this an acceptable trade-off.",
"is_bot": false,
"headline": "Composer/Ant: move the build scripts to the Composer configuration",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-05-08T16:48:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e0e9f003acd33a06df7f452e9351910b89301536",
"body": null,
"is_bot": false,
"headline": "Added improvements to changelog",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2021-05-08T05:02:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc91801ae749ee6410289d554a24f731148d92fe",
"body": "* PHPCS: add a PHPCS configuration file containing all the common command-line parameters.\n This file will be automatically picked up by PHPCS and can be overruled locally by a `[.]phpcs.xml` file.\n Includes downgrading the cyclomatic complexity error to a warning.\n* Ant: remove the configurat\n[…]\nr` for the build step.\n* Git: Add the `phpcs.xml.dist` file to the `.gitattributes` file to be ignored when packaging a release.\n* Git: Add the potential local overload files to the `.gitignore` file.",
"is_bot": false,
"headline": "PHPCS: various improvements",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-05-08T05:01:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e0d333f7d2c22e2e4822d2ab3c996ca11a30a7f5",
"body": "> Namespaced names are now represented using the `T_NAME_QUALIFIED` (`Foo\\Bar`), `T_NAME_FULLY_QUALIFIED` (`\\Foo\\Bar`) and `T_NAME_RELATIVE` (`namespace\\Foo\\Bar`) tokens. `T_NS_SEPARATOR` is only used for standalone namespace separators, and only syntactially valid in conjunction with group use decl\n[…]\nt highlighting between PHP < 8.0 and PHP 8.0+.\n\nI've chosen not to make force the same highlighting across versions, but to let the highlighting respect the different tokenization across PHP versions.",
"is_bot": false,
"headline": "PHP 8.0: handle changed tokenization of namespaced names",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-05-08T04:59:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5a6ff2472c5bfd83a13c5245e08e0883589fb2b9",
"body": null,
"is_bot": false,
"headline": "Tests: add tests covering namespaced names",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-05-08T04:59:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e9cd82737374d58e446423040a3de6d87763038",
"body": null,
"is_bot": false,
"headline": "Changelog - PHPUnit: improve configuration",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2021-05-08T04:55:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a12ad1a625b604872db4b0715813756ba12d053",
"body": "Move the CLI arguments which can be placed in the configuration file to the configuration file and removed them from the Ant build configuration.",
"is_bot": false,
"headline": "PHPUnit: improve configuration",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2021-05-08T04:54:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc1721468ea09282f0cb5b20905ff0d2154645ac",
"body": null,
"is_bot": false,
"headline": "Changelog - changed color dependency",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2020-12-27T09:51:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21684ac3c8d42749d60ea529dd2fe31d0c4fb6e9",
"body": "The `php-parallel-lint/php-console-color` package has tagged a new release.\n\nThe most notable change is the namespace update.\n\nThis updates the PHP Console Highlighter package to use the new version of PHP Console Color.\n\nRefs:\n* https://github.com/php-parallel-lint/PHP-Console-Color/releases/tag/v1.0",
"is_bot": false,
"headline": "Use PHP Console Color 1.0",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2020-12-27T09:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c07c8ee42ec020cbacd01216d1cdbc50f3dc87e6",
"body": null,
"is_bot": false,
"headline": "Changelog - Travis: add build against PHP 8.0",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2020-12-20T17:34:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b5638eae0c25d6c4d042b1af75b2cdf9a21444",
"body": "PHP 8.0 has been branched off two months ago, so `nightly` is now PHP 8.1 and in the mean time PHP 8.0 was released last week.\n\nAs of today, there is a PHP 8.0 image available on Travis.\n\nThis PR adds a new build against PHP 8.0 to the matrix and, as PHP 8.0 has been released, that build is not allowed to fail.",
"is_bot": false,
"headline": "Travis: add build against PHP 8.0",
"author_name": "jrfnl",
"author_login": "jrfnl",
"committed_at": "2020-12-20T17:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b65f4bfbb5037c68e6ddf99b6f539b7177d687d1",
"body": null,
"is_bot": false,
"headline": "Changelog - added parts from update the test suite",
"author_name": "Václav Makeš",
"author_login": "grogy",
"committed_at": "2020-09-21T17:37:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 20,
"latest_release_at": "2022-02-18T12:18:33Z",
"latest_release_tag": "v1.0.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 11,
"days_since_latest_release": 1615,
"mean_days_between_releases": 646.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "php-parallel-lint/php-console-highlighter",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/php-parallel-lint/php-console-highlighter",
"is_deprecated": false,
"latest_version": "v1.0.0",
"repository_url": "https://github.com/php-parallel-lint/PHP-Console-Highlighter",
"versions_count": 8,
"total_downloads": 32681328,
"dependents_count": 631,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 830551,
"first_published_at": null,
"latest_published_at": "2022-02-18T08:23:19Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1615
}
]
},
"popularity": {
"forks": 6,
"stars": 88,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2020-04-30",
"count": 1
},
{
"date": "2020-05-26",
"count": 2
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2024-04-23",
"count": 1
},
{
"date": "2024-09-24",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 22757,
"source_files_sampled": 10,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 7,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "ext-tokenizer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-parallel-lint/php-code-style",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-parallel-lint/php-console-color",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-parallel-lint/php-parallel-lint",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-parallel-lint/php-var-dump-check",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 7,
"direct_count": 0,
"indirect_count": 7
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 67,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jrfnl",
"commits": 92,
"avatar_url": "https://avatars.githubusercontent.com/u/663378?v=4"
},
{
"type": "User",
"login": "JakubOnderka",
"commits": 51,
"avatar_url": "https://avatars.githubusercontent.com/u/163343?v=4"
},
{
"type": "User",
"login": "grogy",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/1322983?v=4"
},
{
"type": "User",
"login": "reedy",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/67615?v=4"
},
{
"type": "User",
"login": "avindra",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/126848?v=4"
},
{
"type": "User",
"login": "glensc",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/199095?v=4"
},
{
"type": "User",
"login": "GrahamCampbell",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2829600?v=4"
},
{
"type": "User",
"login": "cafferata",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1150425?v=4"
},
{
"type": "User",
"login": "hason",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/288535?v=4"
},
{
"type": "User",
"login": "siwinski",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1034024?v=4"
}
],
"contributors_sampled": 11,
"top_contributor_share": 0.523
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"cs.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "18 out of 26 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 10/15 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 7 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 2,
"reason": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "fc2739deea29c9e1bc5dbcc85b204b8086955e07",
"ran_at": "2026-07-22T17:19:49Z",
"aggregate_score": 5.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T02:23:31Z",
"oldest_open_prs": [
{
"number": 74,
"created_at": "2026-01-26T04:11:58Z",
"last_comment_at": "2026-03-21T00:08:35Z",
"last_comment_author": "jrfnl"
}
],
"last_merged_pr_at": "2026-07-21T02:21:32Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/php-parallel-lint/PHP-Console-Highlighter",
"host": "github.com",
"name": "PHP-Console-Highlighter",
"owner": "php-parallel-lint"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 59,
"vitality": 49,
"community": 63,
"governance": 63,
"engineering": 52
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 49,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"commits_last_year": 20,
"human_commit_share": 0.88,
"days_since_last_push": 1,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "20 commits in the last year",
"points": 11.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 20
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v1.0.0",
"releases_from_tags": false,
"days_since_latest_release": 1615,
"mean_days_between_releases": 646.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1615 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1615
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~646.2 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 646.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 177,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 177 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 177
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 63,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"forks": 6,
"stars": 88,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "88 stars",
"points": 31.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 88
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"packages": [
"php-parallel-lint/php-console-highlighter"
],
"dependents": 631,
"ecosystems": "packagist",
"total_downloads": 32681328,
"monthly_downloads": 830551
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "830,551 downloads/month across packagist",
"points": 78.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 830551,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "631 packages depend on it",
"points": 18.7,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 631
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 11,
"top_contributor_share": 0.523
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 52% of commits",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 52
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "11 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 11
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"merged_prs": 67,
"open_issues": 0,
"closed_issues": 9,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "67/70 decided PRs merged",
"points": 36.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 67,
"decided": 70
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 10/15 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"followers": 4,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "php-parallel-lint",
"public_repos": 6,
"account_age_days": 2352
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of php-parallel-lint",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "php-parallel-lint"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~6 yr old",
"points": 18.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "moderate",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"php-parallel-lint/php-console-highlighter"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 1615
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1615 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1615
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "8 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 8
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 52,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 26 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 5.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 26 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 10/15 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 18
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 38,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.682,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 88 human commits state their intent (structured subject or explanatory body)",
"points": 36.4,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 88
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.12
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "12 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 12,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 22757,
"source_files_sampled": 10,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/10 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 10,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T17:20:12.452699Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/php-parallel-lint/PHP-Console-Highlighter.svg",
"full_name": "php-parallel-lint/PHP-Console-Highlighter",
"license_state": "standard",
"license_spdx": "MIT"
}