authree/qiyu-tool

Release historydanger

The latest release was about 4 years ago, with no releases in the last 12 months and only 4 releases overall. This is strong evidence of abandonment risk despite the package not being deprecated.

Project backingcaution

The registry namespace is backed by a user-owned repository rather than an organization, and no organizational backing is shown to compensate for the single-maintainer publishing context.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository belongs to the published package.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these values provide little external evidence of adoption or review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a hygiene gap rather than a standalone severe risk.