wengoooo/yituo

The README is substantial, the package declares MIT licensing, and the repository matches the package. Its small user and contributor base offers little evidence of ongoing support, while the lack of security tooling leaves maintenance risk unresolved.

Latest v1.1.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published on January 10, 2020, and there have been no releases in the last 12 months despite 2,589 days of package age. The 12 historical releases show prior activity but do not offset the prolonged freeze.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in 6 years 8 months. This is strong evidence of abandonment risk.

Project backing

The repository owner is an individual user rather than an organization, so there is no organizational backing signal to compensate for the thin maintenance evidence.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little independent evidence of community support.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That leaves a transparency and maintenance gap, especially for a package that has been inactive for years.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Wengo

Direct Dependencies

Dependency	Last Release	Score
pimple/pimple Version ^3.2	—	—
predis/predis Version ^1.1	—	—
symfony/cache Version ^4.3	—	—
jaeger/querylist Version ^4.1	—	—
league/oauth2-client Version ^2.4	—	—