guancheng/msgpack
Tests, a README, release notes, and an MIT license make the package understandable and straightforward to audit. Its small project has no security policy, so maintenance ownership is harder to verify.
42%
Total Score
50
80
50
Health Score Breakdown
Only two releases exist, both from June 2017, with no releases in the last 12 months. That long release gap is a substantial abandonment concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last release being about 9 years ago. This materially lowers confidence in ongoing maintenance.
The repository is not archived, which avoids the strongest abandonment signal, but its last push was in June 2017 and does not offset the lack of recent activity.
No security policy was found in the repository. This is a transparency and reporting gap, though it is less severe because the package includes source, tests, and a license.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Peter Lai |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ~5.3 | — | — |
rybakit/msgpack Version ^0.2.2 | — | — |
illuminate/support Version ~5.3 | — | — |
symfony/http-kernel Version ~2.7|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.