PHPackages                             flatt-security/hola-takumi-php - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. flatt-security/hola-takumi-php

ActiveLibrary[Security](/categories/security)

flatt-security/hola-takumi-php
==============================

Takumi Guard blocklist test fixture (canary). Intentionally blocked by packagist.flatt.tech — do not depend on this package.

v1.0.0(1w ago)00proprietaryPHPPHP >=8.0

Since Jun 4Pushed 1w agoCompare

[ Source](https://github.com/flatt-security/hola-takumi-php)[ Packagist](https://packagist.org/packages/flatt-security/hola-takumi-php)[ Docs](https://github.com/flatt-security/hola-takumi-php)[ RSS](/packages/flatt-security-hola-takumi-php/feed)WikiDiscussions main Synced today

READMEChangelogDependenciesVersions (2)Used By (0)

hola-takumi-php
===============

[](#hola-takumi-php)

> ⚠️ **This is a test fixture, not a real library. Do not depend on it.**

A deliberately trivial Composer package owned by GMO Flatt Security, used as a **blocklist canary** for [Takumi Guard](https://shisho.dev/)'s Composer (Packagist) registry proxy at `packagist.flatt.tech`.

Why this exists
---------------

[](#why-this-exists)

Takumi Guard blocks known-malicious packages at the registry-proxy layer. To verify that the block path works end-to-end in a real environment — without ever touching a real package that a customer might legitimately depend on — we keep this package permanently on the Guard blocklist and assert that resolving it through the proxy is rejected.

Because the blocklist gate runs **before** any upstream fetch, this package does **not** need to be published to packagist.org for the test to be meaningful: a `composer require flatt-security/hola-takumi-php` routed through `packagist.flatt.tech` returns HTTP `403` at metadata resolution time.

Expected behavior
-----------------

[](#expected-behavior)

PathThrough `packagist.flatt.tech``GET /p2/flatt-security/hola-takumi-php.json``403` (`X-Guard-Notice: package-blocked`)`composer require flatt-security/hola-takumi-php`fails to resolve (blocked)If this package ever resolves successfully through the proxy, the Guard blocklist path has regressed.

Repository status
-----------------

[](#repository-status)

Internal. This repository is intentionally not published and carries no support guarantees.

###  Health Score

37

—

LowBetter than 81% of packages

Maintenance98

Actively maintained with recent releases

Popularity0

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity38

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

7d ago

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/7039111?v=4)[Deividas](/maintainers/ren-)[@ren-](https://github.com/ren-)

---

Top Contributors

[![ren-](https://avatars.githubusercontent.com/u/7039111?v=4)](https://github.com/ren- "ren- (1 commits)")

---

Tags

guardcanaryblocklisttest fixturetakumi

### Embed Badge

![Health badge](/badges/flatt-security-hola-takumi-php/health.svg)

```
[![Health](https://phpackages.com/badges/flatt-security-hola-takumi-php/health.svg)](https://phpackages.com/packages/flatt-security-hola-takumi-php)
```

###  Alternatives

[mews/purifier

Laravel 5/6/7/8/9/10 HtmlPurifier Package

2.0k18.0M133](/packages/mews-purifier)[paragonie/ecc

PHP Elliptic Curve Cryptography library

24772.0k35](/packages/paragonie-ecc)[pechente/kirby-password-guard

Kirby Password Guard

385.6k](/packages/pechente-kirby-password-guard)[fof/recaptcha

Increase your forum's security with Google reCAPTCHA

1436.9k](/packages/fof-recaptcha)[enupal/backup

Fully integrated Backup solution for Craft CMS

1612.5k1](/packages/enupal-backup)[thomaswelton/laravel-mcrypt-faker

Allows installation of Laravel where the PHP Mcrypt extension is not available. Provides encryption using OpenSSL, or by disabling encryption entierly.

114.0k](/packages/thomaswelton-laravel-mcrypt-faker)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)