NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Packagist · #1542 most downloaded on Packagist
A PHP dependency vulnerabilities scanner based on the Security Advisories Database.
Last release 3 years ago
no release in 18 months
Ships unpredictably
gaps range from 8 days to 1.7 years
Nearly every release is documented
notes for 14 of 15 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
15 releases · first in 2021
Fix Symfony missing int return type
v1.11.0 (2023-11-17) Added Support Symfony 7
One column per quarter.
v1.10.0 (2022-02-22) Added Support Symfony 6
Add allow list option to exclude vulnerabilities by CVE or title
Drop ext-zip requirement via unzip command
Add option to specify a custom temp directory for caching the advisories database
v1.6.1 (2021-02-24) Fixed Fix --no-dev input option
Add option to exclude dev dependencies from scanning
Fix advisory analyzer for dev package dependencies
Improve installation instructions with Composer links
### Added - Support PHP 5.6
### Added - Add simplified API
Fix requirements to allow supported versions of symfony and guzzle
Make json format of analyzer consistent
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →