qingclouds/thinklib

Release historycaution

The latest release was published in January 2023, and there have been no releases in the last 12 months despite 17 releases overall. This long pause is meaningful abandonment risk for a package intended for application development.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not required for a healthy package, but these counts provide little independent evidence of active community support.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are configured. The missing scanning is a modest supply-chain hygiene gap alongside the absence of a security policy.

Repository archivedcaution

The repository is not archived, which is a positive sign, but its last push was also in January 2023. That supports the release history's concern about inactive maintenance rather than compensating for it.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a real transparency gap for a package with application-facing dependencies.