PHPackages                             aleblanc/security-checker - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. aleblanc/security-checker

ActiveLibrary[Security](/categories/security)

aleblanc/security-checker
=========================

A PHP security checker for your composer.lock with github/advisory-database

v7.0.3(4y ago)3850MITPHPPHP >=7.1.3

Since Feb 19Pushed 4y agoCompare

[ Source](https://github.com/aleblanc/security-checker)[ Packagist](https://packagist.org/packages/aleblanc/security-checker)[ RSS](/packages/aleblanc-security-checker/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (1)Dependencies (4)Versions (54)Used By (0)

Packagist Security Checker from Github advisory database
========================================================

[](#packagist-security-checker-from-github-advisory-database)

Use [Github advisory database](https://github.com/github/advisory-database) for perform a [Symfony](https://symfony.com/) security check.

Installation / use :
--------------------

[](#installation--use-)

```
composer require aleblanc/security-checker --dev
php vendor/aleblanc/security-checker/security-checker security:check
```

Perform a security scan with Github Actions / Github CI from Github advisory database
-------------------------------------------------------------------------------------

[](#perform-a-security-scan-with-github-actions--github-ci-from-github-advisory-database)

```
  api_security_checker_github:
    name: Github Advisory Security checker (PHP ${{ matrix.php }})
    runs-on: ubuntu-latest
    timeout-minutes: 20
    strategy:
      matrix:
        php:
          - '8.1'
      fail-fast: false
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          token: "${{ secrets.GITHUB_TOKEN }}"
      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}
          extensions: intl, bcmath, curl, openssl, mbstring, zip
          ini-values: memory_limit=-1
          tools: pecl, composer
          coverage: none
      - run: composer require aleblanc/security-checker --dev
      - run: php vendor/aleblanc/security-checker/security-checker security:check
```

Fork from

###  Health Score

35

—

LowBetter than 80% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity19

Limited adoption so far

Community19

Small or concentrated contributor base

Maturity72

Established project with proven stability

 Bus Factor1

Top contributor holds 77% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~66 days

Recently: every ~216 days

Total

51

Last Release

1525d ago

Major Versions

v3.0.5 → v4.0.32017-03-29

v3.0.7 → v4.0.42017-03-31

4.1.x-dev → v5.0.02018-09-04

v5.0.3 → v6.0.02019-06-04

v6.0.3 → v7.0.02022-03-15

PHP version history (2 changes)v5.0.0PHP >=5.5.9

v6.0.0PHP >=7.1.3

### Community

Maintainers

![](https://www.gravatar.com/avatar/ff383b615d1550571f2ec41f476026fa1f11ec93a330d386727a3f26b0802658?d=identicon)[aleblanc](/maintainers/aleblanc)

---

Top Contributors

[![fabpot](https://avatars.githubusercontent.com/u/47313?v=4)](https://github.com/fabpot "fabpot (124 commits)")[![smaftoul](https://avatars.githubusercontent.com/u/239203?v=4)](https://github.com/smaftoul "smaftoul (3 commits)")[![stof](https://avatars.githubusercontent.com/u/439401?v=4)](https://github.com/stof "stof (3 commits)")[![lyrixx](https://avatars.githubusercontent.com/u/408368?v=4)](https://github.com/lyrixx "lyrixx (3 commits)")[![Seldaek](https://avatars.githubusercontent.com/u/183678?v=4)](https://github.com/Seldaek "Seldaek (2 commits)")[![pschultz](https://avatars.githubusercontent.com/u/607733?v=4)](https://github.com/pschultz "pschultz (2 commits)")[![OskarStark](https://avatars.githubusercontent.com/u/995707?v=4)](https://github.com/OskarStark "OskarStark (2 commits)")[![pborreli](https://avatars.githubusercontent.com/u/77759?v=4)](https://github.com/pborreli "pborreli (2 commits)")[![staabm](https://avatars.githubusercontent.com/u/120441?v=4)](https://github.com/staabm "staabm (2 commits)")[![maxhelias](https://avatars.githubusercontent.com/u/12966574?v=4)](https://github.com/maxhelias "maxhelias (1 commits)")[![maxromanovsky](https://avatars.githubusercontent.com/u/749775?v=4)](https://github.com/maxromanovsky "maxromanovsky (1 commits)")[![OndraM](https://avatars.githubusercontent.com/u/793041?v=4)](https://github.com/OndraM "OndraM (1 commits)")[![opalenet-yann](https://avatars.githubusercontent.com/u/5520714?v=4)](https://github.com/opalenet-yann "opalenet-yann (1 commits)")[![schmittjoh](https://avatars.githubusercontent.com/u/197017?v=4)](https://github.com/schmittjoh "schmittjoh (1 commits)")[![tgalopin](https://avatars.githubusercontent.com/u/1651494?v=4)](https://github.com/tgalopin "tgalopin (1 commits)")[![Tobion](https://avatars.githubusercontent.com/u/610090?v=4)](https://github.com/Tobion "Tobion (1 commits)")[![tucksaun](https://avatars.githubusercontent.com/u/870118?v=4)](https://github.com/tucksaun "tucksaun (1 commits)")[![BackEndTea](https://avatars.githubusercontent.com/u/14289961?v=4)](https://github.com/BackEndTea "BackEndTea (1 commits)")[![xabbuh](https://avatars.githubusercontent.com/u/1957048?v=4)](https://github.com/xabbuh "xabbuh (1 commits)")[![benji07](https://avatars.githubusercontent.com/u/166890?v=4)](https://github.com/benji07 "benji07 (1 commits)")

### Embed Badge

![Health badge](/badges/aleblanc-security-checker/health.svg)

```
[![Health](https://phpackages.com/badges/aleblanc-security-checker/health.svg)](https://phpackages.com/packages/aleblanc-security-checker)
```

###  Alternatives

[shopware/platform

The Shopware e-commerce core

3.3k1.5M3](/packages/shopware-platform)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.3M152](/packages/sulu-sulu)[prestashop/prestashop

PrestaShop is an Open Source e-commerce platform, committed to providing the best shopping cart experience for both merchants and customers.

9.0k15.4k](/packages/prestashop-prestashop)[drupal/core-recommended

Locked core dependencies; require this project INSTEAD OF drupal/core.

6939.5M343](/packages/drupal-core-recommended)[kimai/kimai

Kimai - Time Tracking

4.6k7.4k1](/packages/kimai-kimai)[contao/core-bundle

Contao Open Source CMS

1231.6M2.4k](/packages/contao-core-bundle)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)