Package Health

wellkit/workerman-bundle

The package has a clear README, matching repository, MIT license, and no install-time scripts. Its small audience, single publisher, absent security policy, and years without maintenance leave substantial compatibility and bug-fix risk.

Latest v2.0.1PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

38

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has made no release in nearly four years: its latest release was September 26, 2022, and it had zero releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, with the repository last pushed in September 2022. This indicates maintenance has effectively stopped and creates substantial abandonment risk.

Dependency profilecaution

The package declares 15 runtime dependencies and no development dependencies. That is a relatively broad runtime surface for a small bundle and increases compatibility and upkeep burden.

Maintainerscaution

Only one account has registry publishing access. Because the repository owner is an individual rather than an organization, there is little visible publishing redundancy if that maintainer stops maintaining the package.

Project backingcaution

The registry namespace and repository are tied to an individual account rather than an organization. That does not invalidate the project, but it provides limited visible institutional backing for long-term maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

niqingyang

Direct Dependencies

DependencyLast ReleaseScore
nyholm/psr7
Version ^1.5
symfony/yaml
Version ^6.1
symfony/config
Version ^6.1
symfony/finder
Version ^6.1
workerman/psr7
Version ^1.4

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform