Package Health

meiguonet/mgboot-common-php7

The focused source tree is licensed, correctly linked, and has no install-time scripts. Documentation and security-process coverage are minimal, while the package’s dependency surface adds ongoing compatibility exposure.

Latest 1.0.1PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has only two releases, both around 2021, and none in the last 12 months; the latest release is more than five years old, indicating strong abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of current maintenance.

Dependency profilecaution

The package declares ten runtime dependencies, including framework, HTTP, JWT, and annotation libraries; this creates meaningful compatibility and maintenance exposure for an inactive release.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little supporting evidence of an active user or contributor community.

Repository archivedcaution

The repository is not archived, which preserves a path for future maintenance, but its last push was in September 2021 and does not offset the prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Simon.Ye

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.1.4
—
—
lcobucci/jwt
Version ^3.4.5
—
—
symfony/yaml
Version ^5.3.6
—
—
nesbot/carbon
Version ^2.52.0
—
—
guzzlehttp/guzzle
Version ^7.3.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform