miaoxing/config
The MIT license, changelog, matching repository, and organization backing improve transparency. A post-update command and missing security policy add smaller operational concerns.
58%
Total Score
75
100
83
50
Health Score Breakdown
The package declares a post-update-cmd lifecycle script. This may be legitimate Composer behavior, but it adds install and update complexity that should be understood before adoption.
The package has 72 releases over more than six years, but has had no release in the last 12 months; the latest release was about 17 months ago, which raises maintenance concerns.
There were no commits and no active maintainers in the last 3 months, consistent with the long release gap and indicating that maintenance has currently stalled.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not evidence that the package is unsafe.
The assessed version is not a prerelease and recent releases have no prerelease share, but the package remains on the 0.1 major line, indicating less maturity than a stable 1.x package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 miaoxing/app Version ^0.10.11 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.