guoxing/hello

Release historydanger

There has been only one release, published more than eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency expected to receive maintenance.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with the long gap in release history. No provided signal shows compensating maintenance activity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this is the package's source.

Repo popularitycaution

The repository has one star, no forks, and no watchers, offering little supporting evidence of broad project use or review. Popularity is only supporting evidence, but it does not compensate for the inactivity.

Repo toolingcaution

Composer is used as a build tool, showing basic ecosystem-appropriate project tooling, but no security scanning tools are present. This is a modest hygiene gap rather than a severe dependency risk.