The three-file package provides no README, tests, changelog, or security tooling, leaving little guidance for adoption. Its three runtime dependencies and single publisher increase maintenance uncertainty for a library that has seen no recent activity.
32%
Total Score
0
50
50
50
The latest release was about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency, despite the five historical releases.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and indicating no current maintenance capacity.
The package declares three runtime dependencies and no development dependencies, including platform-specific gateway-worker packages. This increases dependency surface without visible test coverage to validate compatibility.
Neither the package nor the linked repository declares or contains a detected license file. This creates a material legal and adoption risk for a dependency.
The artifact and repository contain only three files: composer.json, .gitignore, and one source file. The minimal structure may fit a small adapter, but it provides little transparency into testing or project documentation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
workerman/gateway-worker Version ^3.0 | — | — |
clarence/workerman-unified Version >=0.0.3 | — | — |
workerman/gateway-worker-for-win Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.