topjz/jz-helper

The repository includes tests, matching package names, and a clear Apache-2.0 license. Its small dependency footprint helps, but the lack of a security policy leaves limited guidance for reporting issues.

Latest v1.0.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 6 years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with a project that has been inactive for years. This materially increases abandonment risk.

Project backing

The registry namespace and repository owner are the same individual account, which makes ownership clear but indicates no visible organizational backing to compensate for a thin maintenance base.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide no meaningful external adoption or maintenance signal to offset the inactivity.

Repo tooling

The repository uses Composer, which fits the package ecosystem, but it has no security scanning tools. This is a modest hygiene gap rather than a standalone reason to reject the release.