Is Whoops Safe?

Whoops — Nerq Trust Score 60.8/100 (C+ grade). Score based on 2 independent trust signals. with 1 known vulnerabilities Last analyzed: 2026-04-12

Whoops is a PHP package (php error handling for cool kids) with a Nerq Trust Score of 60.8/100 (C+), based on 3 independent data dimensions. Last analyzed: 2026-04-12 Security: 80/100. Popularity: 100/100. Data sourced from packagist.org, GitHub, and NVD. Last updated: 2026-04-12. Machine-readable data (JSON).

Is Whoops safe?

Trust Score Breakdown — Whoops has a Nerq Trust Score of 60.8/100 (C+). Measured across 2 independent trust signals (as of 2026-04-12).

Security Analysis → Whoops Privacy Report →

What is Whoops's trust score?

Whoops has a Nerq Trust Score of 60.8/100, earning a C+ grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.

Security
80
Popularity
100

What are the key security findings for Whoops?

Whoops's strongest signal is popularity at 100/100. 1 known vulnerabilities were identified.

Security score: 80/100 (strong)
Popularity: 100/100 — 13,629 stars on PHP Packages

What is Whoops and who maintains it?

Authorfilp
CategoryPHP Packages
Stars13,629
SourceN/A

Whoops Across Platforms

Same developer/company in other registries:

homeassistant-ws
48/100 · npm
oversmash
48/100 · npm

Similar Packagist by Trust Score

psr/container (63)guzzlehttp/guzzle (63)symfony/event-dispatcher (63)symfony/polyfill-ctype (63)phpunit/php-file-iterator (63)
See all safest Packagist →

Compare

Whoops vs psr/containerWhoops vs guzzlehttp/guzzleWhoops vs symfony/event-dispatcher

Safety Guide: Whoops

What is Whoops?

Whoops is a PHP package — php error handling for cool kids.

How to Verify Safety

Run composer audit. Check packagist.org.

You can also check the trust score via API: GET /v1/preflight?target=filp/whoops

Key Safety Concerns for PHP package

When evaluating any PHP package, watch for: dependency vulnerabilities, PHP compatibility.

Measured Signals

Whoops has a Nerq Trust Score of 61/100 (C+). This score is a composite of automated measurements of security, maintenance, community, and quality signals.

Key Takeaways

Detailed Score Analysis

DimensionScore
Security80/100
Maintenance50/100
Popularity100/100
Quality40/100
Community35/100

Based on 5 dimensions. Data from packagist.org, GitHub, and NVD.

What data does Whoops collect?

Whoops is a PHP package maintained by filp. It receives approximately 400,422,221 weekly downloads.

As a development package, Whoops does not directly collect end-user personal data. However, applications built with it may collect data depending on implementation. Privacy score: 80/100.

Review the package's dependencies for potential supply chain risks. Run your package manager's audit command regularly.

Full analysis: Whoops Privacy Report · Privacy review

Is Whoops secure?

Security score: 80/100 (0-100, higher = fewer measured security issues).

Nerq monitors this entity against NVD, OSV.dev, and registry-specific vulnerability databases for ongoing security assessment.

Full analysis: Whoops Security Report

Whoops Across Platforms

Same developer/company in other registries:

homeassistant-ws (npm, 48/100)oversmash (npm, 48/100)

How we calculated this score

Whoops's trust score of 60.8/100 (C+) is computed from packagist.org, GitHub, and NVD. The score reflects 5 independent dimensions: security (80/100), maintenance (50/100), popularity (100/100), quality (40/100), community (35/100). Each dimension is weighted equally to produce the composite trust score.

Nerq analyzes over 7.5 million entities across 26 registries using the same methodology, enabling direct cross-entity comparison. Scores are updated continuously as new data becomes available.

Signals last measured on April 12, 2026. Data version: 1.0.

Full methodology documentation · Machine-readable data (JSON API)

Frequently Asked Questions

Is Whoops Safe?
filp/whoops with a Nerq Trust Score of 60.8/100 (C+). Strongest signal: popularity (100/100). Score based on Security (80/100), Popularity (100/100).
What is Whoops's trust score?
filp/whoops: 60.8/100 (C+). Score based on Security (80/100), Popularity (100/100). Scores update as new data becomes available. API: GET nerq.ai/v1/preflight?target=filp/whoops
What are safer alternatives to Whoops?
In the PHP Packages category, more PHP packages are being analyzed — check back soon. filp/whoops scores 60.8/100.
Does Whoops have known vulnerabilities?
Nerq checks Whoops against NVD, OSV.dev, and registry-specific vulnerability databases. Current security score: 80/100. Run your package manager's audit command for the latest findings.
Is Whoops actively maintained?
Whoops maintenance score: N/A. Check the repository for recent commit activity and issue responsiveness.
API: /v1/preflight Trust Badge API Docs

See Also

Disclaimer: Nerq trust scores are automated measurements based on publicly available signals. They are not endorsements, verdicts, or guarantees of suitability. Always evaluate the signals against your own requirements.

We use cookies for analytics and caching. Privacy