jeffersongoncalves/plump-cli

CLI tool to query PHP package quality scores from Plumb (plumbphp.dev): show scores, trigger scans, view scan history.

v0.1.0 2026-07-15 21:18 UTC

Requires

• php: ^8.2

Requires (Dev)

• guzzlehttp/guzzle: ^7.10
• jeffersongoncalves/laravel-zero-self-update: ^1.0
• laravel-zero/framework: ^12.0
• laravel/pint: ^1.25
• mockery/mockery: ^1.6
• pestphp/pest: ^3.8|^4.1

MIT

• Jefferson Goncalves

• api
• cli
• composer
• quality
• plumb

Published on Packagist.org on 2026-07-15 21:20 UTC

README

plump-cli

A small CLI to query Plumb — mechanically-scored Security, Maintenance, and Ecosystem Health for PHP/Composer packages — directly from the terminal. Show a package's scores, trigger a fresh scan, or browse scan history. No API key required.

Built with Laravel Zero.

Installation

composer global require jeffersongoncalves/plump-cli

Or download the PHAR from the releases page.

Rate limits

Plumb's public API enforces these limits per IP; plump surfaces 429/503 responses (including Retry-After) as a friendly error instead of a raw HTTP failure:

Endpoint	Limit
GET (show, history)	120 requests/minute
POST (scan)	3 requests/15 minutes

Commands

show — package scores and latest scan

plump show laravel/framework

scan — trigger a scan

plump scan laravel/framework

Queues an asynchronous scan (202) or returns the already-fresh cached result (200). Heavily rate limited server-side — see above.

history — scan history

plump history laravel/framework
plump history laravel/framework --sort=-scanned_at --limit=50

Development

composer install
composer test        # pest + pint --test
composer build       # build the PHAR into builds/

License

MIT © Jefferson Gonçalves