jncinet/qihucms-user-address
Risky to adopt: this is a single-release package with no updates since December 2020, creating a substantial abandonment risk. It is clearly identified, licensed, documented, and not deprecated, but the inactive, tiny project offers little evidence of ongoing support.
43%
Total Score
50
72
75
Health Score Breakdown
The package has only one release, published about 5 years and 9 months ago, with no releases in the last 12 months. That is strong evidence of a potentially abandoned dependency.
One registry maintainer provides a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops supporting the package.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is not required for a healthy package, but these numbers provide no meaningful supporting evidence of adoption or community resilience.
Composer is used as the build tool, which fits this PHP package, but no security scanning tooling is present. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.
The repository is not archived, but it was last pushed about 5 years and 9 months ago. Its unarchived status does not compensate for the prolonged absence of source changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 zhangye |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.