hectorqin/think-generate

The package has a clear Apache-2.0 declaration, a matching repository, and a useful README. Its small dependency footprint and lack of install scripts help, but the project shows little evidence of ongoing maintenance or security oversight.

Latest v1.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both published in July 2020, with no release in more than six years. That long silence is strong evidence of abandonment risk for a maintained framework-generation tool.

Project backing

The registry namespace and repository are owned by the same individual account, and the repository name matches the package and README. The ownership is consistent, but it does not show organizational backing.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the measured month. With the package also having no recent releases, this offers little evidence of active project support.

Repo popularity

The repository has one star and no forks, providing little evidence of adoption or an active user community. Popularity is supporting evidence, but this reinforces the maintenance concern.

Repo tooling

Composer build tooling is present, but no security-scanning tooling is detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.