cqy/dreamtrip

The small artifact includes a README, release notes, and no install scripts, keeping adoption straightforward. Composer is present, but the project offers little evidence of support capacity or security oversight.

Latest v0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a single-release package, with no releases in about seven years. That strongly raises abandonment risk, although the package is not marked deprecated.

Repo commit activity

The repository had no commits and no active maintainers in the last three months. Combined with the old release, this is strong evidence that maintenance has stopped.

Maintainers

Only one registry account has publish access. This is a limited publishing base, and no organizational backing is shown to compensate for that concentration.

Project backing

The repository is owned by an individual user rather than an organization, and no broader project backing is shown. That provides limited assurance of continuity for a single-maintainer package.

Repo tooling

Composer build tooling is present, but no security scanning tool is configured. This is a modest transparency and maintenance gap rather than a standalone reason to reject the package.