lisheng201201/lisheng

The linked repository does not identify this package in its name or README, and it has no security scanning or security policy. Its MIT declaration, simple Composer-only dependency profile, and lack of install scripts reduce exposure but do not offset the maintenance and identity concerns.

Latest 0.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published over eight years ago, with no releases in the last 12 months. That strongly indicates abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long period without releases. No newer activity compensates for this gap.

Repo package mention

The linked repository name does not match the package name, and its README does not mention the package. While a name mismatch can occur in a monorepo, the absence of any README reference raises concern that the repository may not belong to this package.

Repo tooling

Composer is present as the build tool, but no security scanning tools are configured. The simple build setup is positive, while the missing scanning is a minor hygiene gap.

Security policy

The linked repository has no security policy. For an old package with no recent maintenance activity, this is a transparency and support gap.