jizhi/warm

The package has a broad dependency surface and no repository security policy, increasing the maintenance burden for adopters. Clear licensing, documentation, tests in the artifact, and a matching active repository provide useful transparency, but recent commit activity is absent.

Latest 1.0.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 37 runtime dependencies, including several framework, storage, messaging, and extension components; this broad surface increases upgrade and compatibility burden.

Maintainers

Only one registry account has publish access, which creates a thin publishing base. The matching repository and user-owned project provide some context, but do not remove the single-publisher risk.

Project backing

The source repository is owned by an individual user rather than an organization, so there is limited visible institutional backing for a package with one registry publisher.

Release history

There have been only two releases over about 16 months, with one release in the last 12 months and a median interval of about 152 days, indicating a slow release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the latest three months, a concrete sign that maintenance may have slowed despite the repository not being archived.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

sym

Direct Dependencies

Dependency	Last Release	Score
webman/cache Version ^2.1	—	—
webman/event Version ^1.0	—	—
webman/redis Version ^2.1	—	—
php-di/php-di Version ^7.0	—	—
psr/container Version ^2.0	—	—