42%
Total Score
unhealthy
Risky: no releases or commits for nearly three years, with an immature v0.0.2 release line.
Only four releases were published, all concentrated around November 2023, with no release in nearly three years and none in the last 12 months. This is strong evidence of abandonment risk, although the package may be intentionally narrow in scope.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The small package scope may reduce the activity needed, but it does not compensate for the absence of recent maintenance evidence.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little additional confidence in ongoing community support.
Composer build tooling is present, and the package has a straightforward artifact layout, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.
The linked repository has no security policy. For a small API client this is a hygiene gap, but it provides less assurance about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
weida/jinritemai-core Version ^v0.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.