xiaocaigua/upload
The package includes tests, a README, and a matching MIT license, but its small user-owned project shows no recent activity. It also lacks a security policy and security scanning, increasing the maintenance risk of adopting an old release.
43%
Total Score
0
75
83
Health Score Breakdown
The latest release was published seven years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency receiving no maintenance.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the seven-year release gap and limited evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers, providing no supporting evidence of a broader user or maintainer community. Popularity is only supporting evidence, but this reinforces the maintenance concern.
Composer build tooling is present, but no security-scanning tools are configured. That weakens ongoing supply-chain and vulnerability hygiene, although it does not by itself show unsafe code.
The repository has no security policy, leaving maintainers' vulnerability-reporting process undocumented. This is a meaningful transparency gap for a file-upload library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Josh Lockhart |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 easyswoole/spl Version ^1.0 | — | — |
easyswoole/http Version ^1.2 | — | — |
aliyuncs/oss-sdk-php Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.