Package Health

goletter/hyperf-sms

The MIT license, focused dependency set, README, and package-to-repository match provide a clear adoption baseline. The missing security policy and minimal project activity leave maintenance and operational transparency weaker than established dependencies.

Latest v1.0.6PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Project backingcaution

The repository is owned by the same individual account as the registry namespace. This confirms alignment, but it does not provide organization-level maintenance backing.

Release historycaution

All five releases were published within about 6 minutes on the first release day, with no later release activity across nearly 11 months; this suggests an initial burst rather than an established cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a concrete sign of limited ongoing maintenance for a package released nearly 11 months ago.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption signal to offset the inactivity.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured, leaving a modest transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

goletter

Direct Dependencies

DependencyLast ReleaseScore
hyperf/di
Version ~3.1.0
—
—
guzzlehttp/guzzle
Version ^7.10
—
—

Weekly Downloads

Info

Last Published
11 months ago
Created
11 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform