wenhainan/think-token

It has a clear Apache-2.0 declaration, a focused nine-file tree, a README, and only PHP as a runtime dependency. There is no security policy or scanning, so maintenance and security oversight are limited.

Latest 1.1.2

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was January 14, 2022, and there have been no releases in the last 12 months. This long gap materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release pause. The repository is not archived, but it shows no current development activity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with one issue still open. This provides no evidence of active maintenance.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. The missing scanning reduces assurance for a package handling authentication tokens.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and response-readiness gap, though it is not evidence of a vulnerability.