xiaosongshu/colorword

The package is small and easy to inspect, with a clear README and only one runtime dependency. Its long inactivity and lack of tests or security scanning make future fixes and verification uncertain.

Latest v1.0.3

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so the single-person maintenance context provides little redundancy if the maintainer stops responding.

Release history

The latest release was in September 2023, with no releases in the last 12 months despite the package being about three years old. This is strong evidence of stalled maintenance, although the stable 1.0.3 version may still suit a narrowly scoped utility.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating little current maintenance capacity.

Repo popularity

The repository has zero stars and forks and one watcher. This offers little supporting evidence of broad review or community support, though popularity alone is not decisive for a small utility.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning reduces verification hygiene without making the package unfit on its own.