Package Health

sxqibo/fast-weather

The repository has had no commits since August 2023 and the package has had no releases in over three years. MIT licensing, a focused dependency set, and a usable README provide some transparency, but no security scanning is configured.

Latest v1.0.3PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package has made four releases, but none in the last three years; its latest release was in August 2023. This is a meaningful maintenance and abandonment concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a repository that has been inactive since August 2023. This materially raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured. That weakens ongoing project hygiene, though it is less serious than the lack of maintenance activity.

Security policycaution

The repository has no security policy. For a small package this is a transparency gap, but it is secondary to the stale release and commit history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

yun
hongwei

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ~6.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform