heming/pdd
The MIT declaration and small runtime dependency set are straightforward. The package offers little supporting evidence for safe long-term maintenance, with no tests, security policy, or security scanning.
42%
Total Score
33
100
63
75
Health Score Breakdown
This is the only release, published about four years ago, with no releases in the last 12 months. That leaves substantial abandonment risk for a dependency.
There were no commits and no active maintainers in the last three months, consistent with the package's roughly four-year release gap and indicating likely abandonment.
Only one registry account has publish access. That is a thin publishing base, with no organizational backing shown to provide redundancy.
A README is present and the exact version has a GitHub release, but the README contains no text and the project has no tests or changelog. The missing tests and changelog are normal repository practice gaps, while the empty README weakens consumer transparency.
The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the single publisher or inactive maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 heming |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version >=6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.