Finds abandoned, unmaintained and branch-pinned packages in composer.lock. PHP Composer plugin and standalone PHAR with evidence, baseline and CI exit codes.
cli php composer ci phar static-analysis supply-chain audit composer-plugin maintenance unmaintained dependencies sarif dependency-management abandoned-packages dependency-rot
-
Updated
Sep 30, 2026 - PHP