coding-cat/hyperf-mongo-plugin
Its tiny artifact and lack of project safeguards make maintenance and integration harder. The release notes and non-archived repository provide limited context, but not enough evidence of ongoing support.
32%
Total Score
64
67
Health Score Breakdown
The package has only one release, published about 7 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a library dependency.
Neither the package nor the linked repository declares or includes a recognized license. That creates a material legal and adoption barrier.
The package and repository contain only three files, including one source file and composer.json. This may be intentional for a small plugin, but leaves little evidence of maintained project structure.
The artifact has no README, tests, or changelog, although the exact release does include GitHub release notes. The missing consumer documentation and absent repository tests reduce transparency and confidence.
Composer is used for the build, which is appropriate, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alcaeus/mongo-php-adapter Version ^1.0 | — | — |
coding-cat/hyperf-skeleton Version ~0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.