Package Health

qingbing/zf-helper

常用的方法和函数,多为静态类,抽象类,接口类等

Latest 1.0.11PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has 12 releases over roughly six years, but none in the last 12 months and the latest recorded release was about four years ago. This materially raises abandonment risk despite the earlier rapid median release interval.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent releases. This is the strongest maintenance concern.

Maintainerscaution

Only one registry publishing account is listed, which limits publishing redundancy. Because the repository is owned by the same individual account, this is consistent with the project's ownership rather than evidence of a broken organization-backed project.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, providing little external evidence of adoption or community support. Low popularity alone is not decisive for a small helper library, but it offers no compensating maintenance signal.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a transparency gap, though the repository's lack of workflows limits the practical impact.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

qingbing

Direct Dependencies

DependencyLast ReleaseScore
nesbot/carbon
Version ^2.46
—
—
phpoffice/phpspreadsheet
Version ^1.17
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform