kehongking/thinkphp-common

Dependency profilecaution

Six runtime dependencies, including the framework, authentication, JWT, and spreadsheet components, create meaningful transitive maintenance and compatibility exposure for a small package.

Maintainerscaution

Only one registry publishing account is listed. The matching repository is owned by the same individual, so there is no organizational backing shown to compensate for the narrow maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. This weakens the maintenance picture, though the recent registry release history provides partial counterevidence.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. Low visibility is not disqualifying for a small package, but it provides little external evidence of review or community support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning layer is a modest transparency and maintenance concern.