Package Health/cross-solution/yawik-xing-vendor-api

cross-solution/yawik-xing-vendor-api

The package includes tests, a clear MIT license, and a usable README. Its release and repository activity have been absent for years, while security scanning and a security policy are missing; this old integration carries maintenance risk.

Latest v0.3.3

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in May 2017, with no releases in the last 12 months. This long release gap is a substantial maintenance concern despite the package having three historical releases.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with a project that has seen no meaningful recent maintenance. The last push was over five years ago.

Repo issue activity

There are two open issues but no new or closed issues and no pull-request activity in the last month. This provides no evidence of current issue handling.

Repo popularity

The repository has no stars or forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of a broad active community.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. For an integration module that handles external service credentials, this is a meaningful maintenance and oversight gap.