ThinkPHP 3.2.x继续维护
58%
Total Score
caution
Usable with caveats: one registry release and a single active contributor limit confidence in its maintenance.
The artifact includes a README, while the repository has tests. The README is only 24 characters and offers little consumer guidance, but repository tests provide some project maturity evidence.
This release is the package's only registry release, with no releases in the last 12 months despite being 420 days old. That weakens evidence of a sustained release process.
One contributor made 100% of the 4 recent commits, leaving no demonstrated backup maintainer if that person becomes unavailable.
Composer is used for builds, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than proof of unsafe code.
The repository has no security policy, so there is no documented reporting or response process for vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
geoip2/geoip2 Version ^2.13 | — | — |
monolog/monolog Version ^2.10 | — | — |
nikic/php-parser Version ^v5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.