The package has a clear MIT license, a substantial README, and included tests. Its single maintainer and lack of security tooling add little resilience for long-term use.
35%
Total Score
25
50
75
83
This is a 7-year-old package with only one release and no releases in the last 12 months, which is strong evidence of abandonment rather than an active maintenance cycle.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing that maintenance has stopped.
Five runtime dependencies create a meaningful dependency surface for a package that has not been updated since 2019. The signal does not show that any dependency is unsafe, so this remains a moderate concern.
Only one registry publishing account is listed. That can be normal for a user-owned project, but it leaves little visible maintainer redundancy alongside the inactivity.
Composer build tooling is present, but no security-scanning tooling was detected, reducing evidence of ongoing release and dependency hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qingbing/php-html Version >=1.0, <2.0 | — | — |
qingbing/php-helper Version >=1.0, <2.0 | — | — |
qingbing/php-render Version >=1.0, <2.0 | — | — |
qingbing/pf-tools-upload Version >=1.0, <2.0 | — | — |
qingbing/pf-widgets-kindeditor Version >=1.0, <2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.