fphd/dingtalk

The package is small and easy to audit, with one runtime dependency, a clear README, an MIT license, and release notes. Its two-star repository has no recent issue or contributor activity, and it lacks security scanning and a security policy.

Latest v1.0.1

Packagist

32%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both in April 2019, with no release in the last 12 months. This long period without releases is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release inactivity. No provided signal shows ongoing maintenance capacity.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than decisive by itself, but it provides little evidence of a broad user or contributor base.

Repo tooling

Composer is used for builds, which fits the package, but no security scanning tools are configured. This is a transparency and maintenance hygiene gap, though it is less severe than the lack of activity.

Security policy

The repository has no security policy, leaving no documented path for reporting or handling vulnerabilities. For a package that sends messages through a webhook, this is a meaningful transparency gap.