Package Health

whereof/think-http-logger

The MIT license is present and the dependency surface is small. The repository is lightly supported, with no tests, security policy, or recent release activity.

Latest 2.0.0PackagistPackagist

28%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

56

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and names tp5er/think-http-logger as its replacement. Package-level deprecation is a severe adoption risk even though it does not by itself indicate maliciousness.

Release historydanger

The package has only two releases, with no release in about 3 years and 8 months and none in the last 12 months. This indicates a maturely inactive release line rather than ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The repository is not archived, but the lack of recent activity reinforces the abandonment concern.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package name. This weakens confidence that the linked repository clearly documents the published package.

Repo popularitycaution

The repository has 2 stars, 2 forks, and no watchers. This is limited supporting evidence of adoption, but popularity alone does not determine package health.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform