Package Health

watsonhaw/lychee-php

Usable with caveats: it has clear licensing, documentation, tests, and an active-looking repository, but the project is only one day old with eight releases and no recorded commits in the last three months. Its very early maturity and lack of security scanning make it a dependency to adopt cautiously.

Latest v0.4.1PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health checks

Dependency profilecaution

The framework declares 13 runtime dependencies across storage, ORM, validation, templating, queues, and other subsystems. This breadth increases dependency and upgrade surface, though it is consistent with the package's framework scope.

Project backingcaution

The package is backed by a user-owned repository rather than an organization, so there is no broader organizational maintenance capacity evident from this signal.

Release historycaution

The project is only 1 day old and has already published 8 releases, indicating an immature release process that has not yet demonstrated sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a serious maintenance concern; however, the project is only 1 day old and the repository was pushed recently, partly explaining the limited history.

Repo popularitycaution

The repository has 0 stars, forks, and watchers, so there is no community adoption evidence yet. This is consistent with the package's one-day age and is supporting rather than decisive evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3.0
twig/twig
Version ^3.0
ramsey/uuid
Version ^4.0
league/flysystem
Version ^3.0
watsonhaw/think-orm
Version ^0.2

Weekly Downloads

Info

Last Published
3 hours ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform