Package Health/woodynew/alicloud-config-monitor

woodynew/alicloud-config-monitor

The package has a usable README, tests, a declared MIT license, and a modest dependency set. Its source project has no recent commits, no security scanning, and no security policy, so maintenance and transparency remain significant concerns.

Latest 1.2.7

Packagist

47%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest about 3 years and 3 months ago and none in the last 12 months. This strongly increases abandonment risk, although the package is not marked deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old latest release, this indicates a project that is not currently receiving maintenance.

Project backing

The package and repository are both owned by the same individual account, providing clear ownership context but no organization-level backing to compensate for the inactive project.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal to offset the maintenance concerns.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance weakness, though it is not evidence of malicious behavior.