Plump Cli
CLI tool to query PHP package quality scores from Plumb (plumbphp.dev): show scores, trigger scans, view scan history.
#plump-cli
A small CLI to query Plumb — mechanically-scored Security, Maintenance, and Ecosystem Health for PHP/Composer packages — directly from the terminal. Show a package's scores, trigger a fresh scan, or browse scan history. No API key required.
Built with Laravel Zero.
#Installation
composer global require jeffersongoncalves/plump-cli
Or download the PHAR from the releases page.
#Rate limits
Plumb's public API enforces these limits per IP; plump surfaces 429/503 responses
(including Retry-After) as a friendly error instead of a raw HTTP failure:
| Endpoint | Limit |
|---|---|
GET (show, history) |
120 requests/minute |
POST (scan) |
3 requests/15 minutes |
#Commands
#show — package scores and latest scan
plump show laravel/framework
#scan — trigger a scan
plump scan laravel/framework
Queues an asynchronous scan (202) or returns the already-fresh cached result (200).
Heavily rate limited server-side — see above.
#history — scan history
plump history laravel/framework plump history laravel/framework --sort=-scanned_at --limit=50
#Development
composer install composer test # pest + pint --test composer build # build the PHAR into builds/
#License
MIT © Jefferson Gonçalves