swordying/num2rmb

The package is licensed, documented, and has no install-time scripts, making adoption straightforward. Its small repository has limited validation and security transparency.

Latest 1.0.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 2 years and 11 months ago, with no releases in the last 12 months. This is strong evidence of stalled maintenance, although the package may be intentionally complete.

Repo commit activity

The repository had zero commits and zero active maintainers in the last 3 months, consistent with the package's single-release history. This materially increases abandonment risk.

Project backing

The package and repository are backed by the same individual user account rather than an organization, so there is no visible organizational maintenance capacity to compensate for the single-maintainer profile.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. For a small package this is a transparency and validation gap, though it is not evidence of malicious behavior.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The small project scope limits the severity but does not remove the transparency gap.