tp5抽取的上传类,供学习用
42%
Total Score
unhealthy
Risky: a single release from 2019 and no recent repository activity make abandonment the main concern.
There has been only one release, published over 6 years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained package, although the stable 1.0 version avoids prerelease uncertainty.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release hiatus. No provided maintenance signal compensates for this lack of recent activity.
The registry namespace and repository owner match, but both identify an individual user rather than an organization. This is consistent ownership evidence, without organizational backing to compensate for inactivity.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of community review or shared maintenance. Popularity is only supporting evidence, but this offers no meaningful compensation for the inactive history.
Composer is used as a build tool, which supports reproducible package handling, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than a severe risk by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.