alanliao/weather
The focused artifact has a README, an MIT declaration, repository tests, and release notes, with a small dependency surface. The repository is not archived or deprecated, but its maintenance and security transparency are limited.
42%
Total Score
0
50
79
50
Health Score Breakdown
The latest release was published in September 2018, with no releases in the last 12 months and only three releases overall. This long period without updates is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no observed ongoing maintenance.
The package declares two runtime dependencies, including Guzzle and Mockery. The count is small, although placing Mockery in runtime dependencies may indicate imperfect dependency hygiene.
Composer is used as the build tool, but no security scanning tool was detected. This is a transparency and maintenance gap, though it does not by itself make the release unfit.
The repository has no security policy. For a small, inactive API client this limits vulnerability-reporting transparency and adds a modest maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 LiaoChao |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mockery/mockery Version ^1.1 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.