lingyilib/rocketmq
The MIT license, matching repository, and usable README improve transparency. However, the package has received no release or commit activity for about five years, with no security policy and almost no community uptake.
40%
Total Score
0
75
75
Health Score Breakdown
Only two releases were published, both in September 2021, and none appeared in the following five years. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving maintenance capacity unproven.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these figures provide no supporting evidence of adoption or community maintenance.
Composer is used for builds, which is appropriate, but no security scanning tooling was detected. This is a modest hygiene gap rather than evidence of unsafe code.
No security policy was found in the repository. This is a transparency and reporting gap, though it is secondary to the much stronger evidence of inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/log Version 5.8.* | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.