Package Health

asiasea-ai/hf3

It has a matching source repository, a clear MIT license, and no install scripts. The single-user project and weak workflow and security hygiene add maintenance risk.

Latest v0.9.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

38

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. For a package only about three months old, that is a meaningful abandonment warning.

Dependency profilecaution

The package declares 88 runtime dependencies and no development dependencies, including many infrastructure and cloud SDK packages. This creates a broad upgrade and transitive-maintenance burden for consumers.

Maintainerscaution

Only one registry publishing maintainer, asiasea-ai, is listed. The repository owner is a user account rather than an organization, so there is little visible publishing redundancy.

Project backingcaution

The registry namespace and repository owner match, but the owner type is User rather than Organization. This supports package identity while offering limited evidence of institutional backing.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. This provides little evidence of community maintenance, though it may also reflect the project's small age and user base.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

asiasea-ai

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ~3.0.2
—
—
flc/dysms
Version ~1.0.3
—
—
hyperf/amqp
Version ~3.2.0
—
—
symfony/uid
Version ~8.1.0
—
—
hyperf/cache
Version ~3.2.0
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform