Package Health/richard8768/aliyun-api-gateway

richard8768/aliyun-api-gateway

Risky to adopt: this is a small, clearly licensed package with usable documentation, but it appears effectively abandoned. It has had only one release, v0.1, and no repository commits for over four years, leaving little evidence of ongoing maintenance.

Latest v0.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published over four years ago, with no releases in the last 12 months. This is strong evidence of limited maintenance and raises abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for over four years. This substantially increases abandonment risk.

Project backing

The registry namespace and repository owner match, but the project is backed by an individual account rather than an organization. That is consistent ownership, while the single-person backing leaves limited redundancy.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence of limited adoption, but it is not decisive by itself for a small package.

Repo tooling

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a transparency gap, though it is less significant than the package's prolonged inactivity.