alex-qiu/dubbo-php-client
The artifact includes tests and a README, and installation has no lifecycle scripts. The MIT declaration conflicts with an Apache-2.0 license file, and the repository has no security policy or scanning.
38%
Total Score
0
50
75
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was over five years ago despite being a stable major version. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing that development stopped over five years ago.
The artifact contains a license file, but its Apache-2.0 text conflicts with the manifest's MIT declaration. That ambiguity requires clarification before adoption.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful community-maintenance cushion.
Composer is used for the build, which is appropriate, but no security scanning tools are present. This is a modest transparency and maintenance gap alongside the stronger inactivity concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 alex |
| jquick |
| nick fan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alex-qiu/flax Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.