Is Packagist Safe?
Packagist — Nerq Trust Score 48.2/100 (D grade). Score based on 2 independent trust signals. Last analyzed: 2026-04-12
Packagist is a SaaS platform with a Nerq Trust Score of 48.2/100 (D), based on 3 independent data dimensions. Last analyzed: 2026-04-12 Security: 90/100. Popularity: 0/100. Data sourced from company registration, SOC 2/ISO 27001 certifications, privacy policy analysis, and app store metadata. Last updated: 2026-04-12. Machine-readable data (JSON).
Is Packagist safe?
Trust Score Breakdown — Packagist has a Nerq Trust Score of 48.2/100 (D). Measured across 2 independent trust signals (as of 2026-04-12).
What is Packagist's trust score?
Packagist has a Nerq Trust Score of 48.2/100, earning a D grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.
What are the key security findings for Packagist?
Packagist's strongest signal is security at 90/100. No known vulnerabilities have been detected.
What is Packagist and who maintains it?
| Author | Unknown |
| Category | SaaS |
| Source | N/A |
SaaS Assessment
Open Source
Packagist is open source with 1,802 GitHub stars.
Packagist Across Platforms
Same developer/company in other registries:
Similar Saas by Trust Score
Safety Guide: Packagist
What is Packagist?
Packagist is a SaaS platform — Default package repository for PHP Composer. 350K+ packages..
How to Verify Safety
Check SOC 2 compliance. Review data handling and incident history.
You can also check the trust score via API: GET /v1/preflight?target=Packagist
Key Safety Concerns for SaaS platform
When evaluating any SaaS platform, watch for: data security, compliance certifications, incident history.
Measured Signals
Packagist has a Nerq Trust Score of 48/100 (D). This score is a composite of automated measurements of security, maintenance, community, and quality signals.
Key Takeaways
- Packagist has a Trust Score of 48/100 (D).
- The score is a measured composite — it is not a suitability judgment. Evaluate the individual signals against your own requirements.
- Query the current measured values via the Nerq API.
Detailed Score Analysis
| Dimension | Score |
|---|---|
| Security | 90/100 |
| Maintenance | 50/100 |
| Popularity | 0/100 |
| Quality | 40/100 |
| Community | 35/100 |
Based on 5 dimensions. Data from company registration, SOC 2/ISO 27001 certifications, privacy policy analysis, and app store metadata.
What data does Packagist collect?
Privacy assessment for Packagist is not yet available. See our methodology for how Nerq measures privacy, or the public privacy review for any community-contributed notes.
Is Packagist secure?
Security score: 90/100. Default package repository for PHP Composer. 350K+ packages.
Check Packagist's security page for certifications such as SOC 2 Type II, ISO 27001, or GDPR compliance documentation. These certifications indicate that the vendor follows established security practices and undergoes regular audits.
For enterprise deployments, verify SSO/SAML support, role-based access control, and audit logging capabilities.
Full analysis: Packagist Security Report
How we calculated this score
Packagist's trust score of 48.2/100 (D) is computed from company registration, SOC 2/ISO 27001 certifications, privacy policy analysis, and app store metadata. The score reflects 5 independent dimensions: security (90/100), maintenance (50/100), popularity (0/100), quality (40/100), community (35/100). Each dimension is weighted equally to produce the composite trust score.
Nerq analyzes over 7.5 million entities across 26 registries using the same methodology, enabling direct cross-entity comparison. Scores are updated continuously as new data becomes available.
Signals last measured on April 12, 2026. Data version: 0.0.
Full methodology documentation · Machine-readable data (JSON API)
Frequently Asked Questions
Is Packagist Safe?
What is Packagist's trust score?
What are safer alternatives to Packagist?
Is Packagist GDPR compliant?
Does Packagist sell my data?
Popular in SaaS
Browse Categories
See Also
Disclaimer: Nerq trust scores are automated measurements based on publicly available signals. They are not endorsements, verdicts, or guarantees of suitability. Always evaluate the signals against your own requirements.