Webman框架限流中间件
58%
Total Score
caution
Usable with caveats: maintenance has stalled, with no commits in the last three months and a single maintainer.
Only one registry publishing account is listed, leaving little visible publishing redundancy. The linked repository is owned by the same individual, but that does not offset the thin maintainer base.
The package has three releases, all clustered within roughly two days, with no later release activity across the remaining package lifetime. This suggests a limited maintenance track record rather than an established release cadence.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the tightly clustered release history, this indicates stalled maintenance.
Composer is used for the build, but no security-scanning tooling is configured. This is a transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities. For middleware that processes application requests, this is a meaningful governance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
workerman/webman-framework Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.