Package Health

qiuxiaoce/qiuxiaoce-php

This is a newly published, small PHP SDK with a clear MIT license, matching repository, minimal dependency surface, and no install-time scripts, which are positive transparency and integration signals. However, it has only one release (v0.1.0, published today), no tests or changelog in either the artifact or repository, no security scanning or security policy, and no demonstrated adoption or issue activity. The repository is not archived and was pushed today, but there is not yet enough history to establish maintenance reliability, so adoption is reasonable for evaluation or low-risk use but should be treated cautiously for a critical dependency.

Latest v0.1.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

One registry maintainer, QiuXiaoCe Team, is consistent with a small newly published package, but it leaves little visible publishing redundancy if that account becomes inactive.

Package scaffoldingcaution

A substantial README is present, but neither the package nor repository contains tests or a changelog. For a newly released SDK this is a genuine maintenance and verification gap rather than merely a consumer-ergonomics issue.

Project backingcaution

The source repository is owned by a user account rather than an organization. This does not imply poor health, but it provides limited evidence of institutional backing for a package with only one maintainer.

Release historycaution

There is only one release and the package was published today, so no historical release cadence or maintenance record has been demonstrated yet.

Repo popularitycaution

The repository has zero stars, forks, and watchers. For a package published today this is weak supporting evidence rather than a severe concern, but there is no demonstrated community adoption yet.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

QiuXiaoCe Team

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
19 days ago
Created
19 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform