qixinyun/pingxiang-anyuan-portal-config
The package is clearly licensed, has a matching source repository, and uses Composer for its build. Its small footprint and single-publisher ownership provide limited evidence of ongoing maintenance, while the absent security policy reduces transparency.
58%
Total Score
50
75
50
Health Score Breakdown
The registry lists one maintainer, qixinyun. A single publisher can be sufficient for a small configuration package, but it leaves little visible redundancy if maintenance stops.
Only two releases exist, with the latest published in February 2022 and none in the last 12 months. This long release gap is a meaningful maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that is no longer actively maintained. The repository is not archived, which provides only limited compensation.
Composer is used as the build tool, which supports reproducible package structure, but no security-scanning tool was detected. That is a modest supply-chain hygiene gap.
The linked repository has no security policy. This does not show a vulnerability, but it reduces transparency about how dependency and vulnerability reports are handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 qixinyun |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.