The stable MIT release includes a README and has no install-time scripts. Its only release was in September 2023, with no recent commits and one registry maintainer, leaving substantial abandonment risk.
45%
Total Score
38
50
78
88
The package has only one release, published in September 2023, and none in the following 12 months. That limited history and long release gap increase abandonment risk.
There were zero commits and zero active maintainers in the last three months. Alongside the single old release, this is strong evidence of current inactivity.
Four runtime dependencies, including framework and Workerman components, create meaningful transitive maintenance exposure, although the profile is not unusually broad.
Only one account has registry publishing access. This is a narrow publishing base and adds continuity risk when combined with the lack of recent activity.
The repository owner is an individual user rather than an organization, so the single registry maintainer provides little organizational continuity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^5.1.10 || ^6.0.0 | — | — |
workerman/gatewayclient Version 3.0.0 | — | — |
workerman/gateway-worker Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.