jiadd/umeng_push

The package has a clear MIT license, a small dependency surface, and no install-time scripts. Its source has had no commits or releases since November 2020, and the linked repository does not clearly identify or mention this package.

Latest 1.0.5

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is over five years old but has only six releases, all concentrated in November 2020, with no releases in the last 12 months. This is strong evidence of abandonment risk for a package that may need ongoing compatibility maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since November 2020. The repository is not archived, but that does not compensate for the absence of recent work.

Repo package mention

The repository name does not match the package name, and its README does not mention the package. Although name mismatches can occur with subpackages, the absence of any README reference makes package ownership and provenance less clear.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is not required for a healthy small package, but these figures provide little supporting evidence of active adoption or community oversight.

Security policy

The linked repository has no security policy. For a package that sends push notifications, this reduces transparency around vulnerability reporting and maintenance expectations.