Package Health

nason/weather

The README is useful, and the repository includes tests plus release notes for this version. Its runtime dependency list also includes PHPUnit and Mockery, adding avoidable weight for a small weather client.

Latest 0.0.1PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

63

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

This is the sole release, published about 5 years and 5 months ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers during the last 3 months. Combined with the old last push and sole release, this materially increases abandonment risk.

Dependency profilecaution

The package declares three runtime dependencies, including PHPUnit and Mockery, which are normally development tools. That is an unusual and avoidable dependency burden for a small weather client.

Maintainerscaution

Only one registry maintainer account is listed. The project is user-backed rather than organization-backed, so there is little visible publishing redundancy.

Project backingcaution

The repository is owned by an individual account rather than an organization. That is not inherently unhealthy, but it provides less visible backing to offset the package's inactive maintenance history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

nason

Direct Dependencies

DependencyLast ReleaseScore
mockery/mockery
Version ^1.4
—
—
phpunit/phpunit
Version ^9.5
—
—
guzzlehttp/guzzle
Version ^7.3
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform