Package Health

guanguans/yii-jpush

The package has clear licensing, useful documentation, and repository tests. Its release and commit activity stopped more than five years ago, while security review coverage is limited.

Latest v1.0.5PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Project backingcaution

The registry namespace and repository owner match, and the owner is an individual account. This is consistent ownership, though it indicates a thinner backing model than an organization-owned project.

Release historycaution

The latest release was more than five years ago, with no releases in the last 12 months. Six releases over roughly a year shows an earlier maintenance pattern, but the long current gap raises abandonment risk.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the last push being more than five years ago. This materially increases the chance that defects will remain unaddressed.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a maintenance and transparency gap, though it is less severe than the prolonged inactivity.

Repository archivedcaution

The repository is not archived, but its last push was more than five years ago; the non-archived status is a modest positive rather than evidence of active maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

guanguans

Direct Dependencies

DependencyLast ReleaseScore
jpush/jpush
Version dev-master
—
—
yiisoft/yii2
Version ~2.0
—
—
symfony/options-resolver
Version ^4.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform