Package Health

jasonli50358/huawei-push

The small dependency surface and security policy are positives, while the sole maintainer and empty repository activity leave little evidence of ongoing support. The license mismatch and absent README add transparency and integration concerns.

Latest v0.9PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

38

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was published nearly six years ago, and there have been no releases in the last 12 months. Nine releases arrived within about one day in October 2020, suggesting a short-lived project rather than sustained maintenance.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Licensecaution

The artifact includes an Apache-2.0 license file, but the manifest declares MIT. The release is licensed, yet the mismatch creates avoidable uncertainty about which terms apply.

Maintainerscaution

The package has one registry maintainer, and the linked repository is owned by an individual rather than an organization. This leaves a thin support base, although maintainer count alone does not prove abandonment.

Package scaffoldingcaution

The published artifact has no README, tests, or changelog, while the repository also shows no tests or changelog. Missing tests and changelog are normal for a published artifact, but the absent README is a minor integration gap for a PHP library.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

jasonli50358

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform