lhai/scf
It has a substantial README, tests, and a non-archived source tree, which improve day-to-day adoption. The broad runtime dependency set and absent security policy add operational overhead.
63%
Total Score
63
50
83
75
Health Score Breakdown
The release declares 39 runtime dependencies, including many PHP extensions and external services, increasing upgrade and compatibility overhead even though the profile is explicit.
An MIT license is declared and license files are present, but the artifact identifies Apache-2.0, creating an unresolved licensing mismatch that should be clarified before adoption.
Only one registry account, lanhai, can publish releases. This is consistent with the user-owned project but leaves publishing continuity dependent on one person.
The repository is owned by an individual user rather than an organization, so there is no observed organizational handoff capacity to offset the concentrated maintainer base.
All 12 recent commits came from one contributor, so maintenance knowledge and release capacity are concentrated in a single person.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 lanhai |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mix/redis Version ^3.0 | — | — |
twig/twig Version ^3.0 | — | — |
brick/math Version ^0.9.3 | — | — |
nelexa/zip Version ^4.0 | — | — |
simps/mqtt Version ^1.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.