lcsdk/lc-oss-sdk

A single maintainer, no recent contributors, and no security policy provide little ongoing support. The package is licensed and its repository matches the package, but nearly four years without releases or commits remains a serious maintenance concern.

Latest 1.0.9

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly four years, with only three releases clustered on its first day. That strongly indicates abandonment risk despite the package not being deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and offering no evidence of ongoing maintenance.

License

The artifact includes LICENSE and Notice.MD files and the repository has a license file, which is positive. However, the detected files include Apache-2.0 and MIT while the manifest declares only MIT, creating a licensing mismatch that should be clarified.

Maintainers

Only one account has registry publishing access, and the project is backed by an individual repository owner rather than an organization. This leaves limited visible continuity if that maintainer stops publishing.

Repo popularity

The repository has zero stars and forks and one watcher, providing little supporting evidence of external use or review. Popularity is not required for health, but this does not compensate for the inactivity.