Package Health

liyu/dingo-serializer-switch

The package is small, clearly documented, and has matching source, a valid MIT license, and no install-time scripts. A missing security policy leaves less guidance if maintenance issues arise.

Latest 0.3.2PackagistPackagist

57%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo commit activitydanger

There were no commits or active maintainers in the three months before collection, and the last repository push was nearly four years earlier. This is strong evidence of inactive maintenance.

Release historycaution

The latest release was published in June 2020, more than six years before collection, and there were no releases in the last 12 months. The ten-release history shows an established package, but its current maintenance appears stalled.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That weakens automated oversight, although it is less serious than the prolonged inactivity.

Security policycaution

The repository has no security policy, leaving no published process for reporting or handling vulnerabilities. This matters more because recent maintenance activity is absent.

Version stabilitycaution

Version 0.3.2 is a non-prerelease release, which is preferable to an explicitly experimental build. Its 0.x major version still suggests API stability may be limited.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yu Li

Direct Dependencies

DependencyLast ReleaseScore
dingo/api
Version ^2.0|^3.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform