FriendsOfPHP/security-advisories resource
A database of PHP security advisories observed · 2026-08-28
Health v2 · maintenance only
77/100
- Activity 99
- Release rhythm 35
- Longevity 100
Flags: no_releases
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 4969
- days_rel: n/a
- days_push: 7
- n_releases_24m: 0
Adoption not part of the score
2139 stars · 328 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A community-maintained database of known security vulnerabilities in PHP Composer packages, stored as YAML files keyed by CVE or date. It centralizes advisory data for tools like the local-php-security-checker and GitHub security actions to consume.
Use cases
- check composer.lock for known vulnerabilities
- audit php dependencies for cves
- feed security advisories into ci pipeline
- find affected versions of a php package
- centralize php vulnerability data
When to choose
- you run PHP projects with Composer dependencies and want automated vulnerability checks
- you build tooling that needs a machine-readable PHP advisory database
When to avoid
- you need authoritative primary-source security information
- you work outside the PHP/Composer ecosystem
Facets
dataset · maturity active
security dependency-audit vulnerability-scanning security developer-tools php cli composer packagist security-advisories cve yaml-database php
1 source
- readme: https://github.com/FriendsOfPHP/security-advisories · fetched 2026-08-28 · 398e9fa61b84
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| FriendsOfPHP/security-advisories | main | 77 |
For agents
markdown · JSON · MCP: product_card(name="FriendsOfPHP/security-advisories")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem