getonging/webman-api-sign
The source includes a substantial README, tests, and release notes, while the package is not deprecated or archived. Its minimal adoption, absent license, and no security policy add maintenance and transparency concerns.
55%
Total Score
50
100
72
75
Health Score Breakdown
No declared license or license file was found in the package or repository, which creates a material legal and transparency gap for adoption.
The repository is owned by an individual user rather than an organization, so the single registry maintainer does not have organizational backing to offset the thin support structure.
The package has had only two releases, both in October 2023, with none in the following nearly three years. This leaves current maintenance and compatibility uncertain.
The repository has one star, zero forks, and one watcher, providing little external evidence of review or community support. Low popularity alone is supporting caution, not a decisive health failure.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 一男 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version 1.1.1 | — | — |
webman/think-orm Version ^1.0 | — | — |
webman/think-cache Version ^1.0 | — | — |
phpseclib/phpseclib Version ~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.