Package Health

songzw/weather

The package includes a README, repository tests, an MIT declaration, and no install-time scripts. Its small user base, absent security policy, prerelease status, and long inactivity make continued maintenance uncertain.

Latest 1.3.5-alphaPackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has had no releases in the last 12 months, and its latest release was nearly seven years ago despite 12 total releases. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year gap since the last repository push. This materially increases maintenance and abandonment risk.

Dependency profilecaution

Three runtime dependencies are declared, including testing libraries such as PHPUnit and Mockery. Treating development-oriented packages as runtime dependencies adds unnecessary dependency weight and suggests an imprecise package manifest.

Project backingcaution

The repository is owned by an individual user rather than an organization, and the registry namespace is also individual. Combined with the lack of recent activity, this offers limited backing evidence.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide little supporting evidence of community adoption.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

songzw

Direct Dependencies

DependencyLast ReleaseScore
mockery/mockery
Version ^1.2
—
—
phpunit/phpunit
Version ^8.3
—
—
guzzlehttp/guzzle
Version ^5.0
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform