Package Health

tsaotai/tsaotai-addons

This is a usable but relatively young package with clear licensing, a stable release series, frequent releases, a non-archived repository, a matching source project, and a small dependency footprint. The main concerns are that the repository shows no commits or active maintainers in the last 3 months, the project is maintained by a single user account, there are no tests or security policy, and repository adoption is minimal. The recent release activity and current repository push provide some counterweight, but the limited maintenance and transparency evidence make this a caution-level dependency rather than a strongly established one.

Latest 2026.1.10PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry maintainer account is listed, which creates a bus-factor concern; the repository is user-owned rather than organization-owned, so there is no provided organizational backing to compensate for it.

Package scaffoldingcaution

A README and changelog are present, but neither the artifact nor repository contains tests. For a runtime plugin package, the missing test coverage is a genuine maintenance concern.

Project backingcaution

The source repository is owned by a user account rather than an organization, so the package has limited visible project backing and should not be assumed to have institutional support.

Repo commit activitycaution

The repository records 0 commits and 0 active maintainers during the last 3 months. This is a significant maintenance concern, although the recent push and frequent registry releases partially offset the possibility of abandonment.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently negative for a small package, but it provides no evidence of active community maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

TsaoTai

Direct Dependencies

DependencyLast ReleaseScore
topthink/framework
Version ^8.0
—
—

Weekly Downloads

Info

Last Published
21 days ago
Created
4 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform