firstphp/chuanglan

The package is small and clearly scoped, with a matching repository, tests, license, and no install scripts. Its tiny user base and absent security tooling provide little confidence for a nearly seven-year-old dependency.

Latest 1.3.0

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published nearly seven years ago, with no releases in the last 12 months. That strongly suggests abandonment risk, despite the package remaining non-deprecated.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year gap since its last release. No current maintenance capacity is visible.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is not required for a healthy package, but this provides little supporting evidence of active use or community oversight.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Security policy

The repository has no security policy. For a small, inactive package this leaves vulnerability-reporting expectations unclear and adds to the broader maintenance concern.