Package Health

qixinyun/xx-resourcecatalog

Documentation is minimal but present, and the source remains available. Its sole release was over six years ago and the repository shows no recent commits, leaving maintenance capacity unproven. No security policy adds a smaller transparency gap.

Latest v0.1.0PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has had only one release, published over six years ago, with no releases in the last 12 months. This strongly suggests an abandoned or unmaintained project, although it is not deprecated.

Repo commit activitydanger

There were no commits or active maintainers in the last three months, consistent with the long release gap. This is a concrete maintenance concern for a dependency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest hygiene gap, not evidence that the package is unsafe or abandoned on its own.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities would be reported and handled. This is secondary to the much stronger evidence of stalled maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

qixinyun

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
6 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform