wangningkai/olaindex-cmd

The package includes a README, tests, an MIT license, and a source repository that clearly matches its name. Its build setup has no security scanning, while the project has had no recorded release or commit activity for roughly six years, making maintenance uncertain.

Latest v1.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published roughly eight years ago, with no releases in the last 12 months. That is strong evidence of stalled maintenance for a dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates sustained inactivity and raises abandonment risk.

Lifecycle scripts

An install-time post-root-package-install script runs during Composer installation. This is a transparency and review consideration, but the signal does not show unsafe behavior by itself.

Project backing

The repository is owned by an individual account rather than an organization, so there is no provided evidence of broader project backing to compensate for the thin maintenance history.

Repo tooling

The repository uses Composer and Box for builds, but no security scanning tools are present. Build tooling supports reproducibility, while the missing scanning is a modest hygiene gap.