razonyang/psr7-swoole
The small codebase includes tests, a clear README, and no install-time scripts. Its only two releases were published about four years ago, with no recent commits, while the license mismatch and unpinned workflow actions add smaller concerns.
47%
Total Score
33
100
75
75
Health Score Breakdown
The package has had only two releases, both in September 2022, and none in roughly four years. That is strong evidence of abandonment risk for a dependency that may need compatibility fixes.
There were no commits and no active maintainers in the last three months, consistent with the release history showing no updates for roughly four years. This materially increases abandonment risk.
The artifact includes a license file, so the release is licensed, but the declared MIT license does not match the detected BSD-3-Clause text. That inconsistency reduces transparency.
The registry namespace and repository are owned by the same individual, so ownership is consistent, but there is no organization backing shown to compensate for the thin maintenance base.
There are no open issues or pull requests and no recent issue or review activity. This is neutral for a small stable package, but it offers no evidence of current support.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 razonyang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.5 | — | — |
psr/http-message Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.