xujif/ucloud-ufile-sdk

The package is small, has a limited dependency surface, and includes tests and a readable package tree. Its last registry release was about 10 years ago, source activity stopped in July 2018, and the repository has little adoption or security oversight.

Latest 1.0.6

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 10 years ago, with no releases in the last 12 months and only five releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months, while the last repository push was in July 2018. This indicates prolonged inactivity and raises abandonment risk.

Maintainers

One registry maintainer is consistent with a user-owned project, but it leaves little visible publishing redundancy. The concern is secondary to the observed inactivity.

Project backing

The registry namespace and repository are owned by the same individual account, showing consistent ownership but no organizational backing. This offers limited maintenance capacity compared with an actively maintained team project.

Repo package mention

The repository name matches the package name, supporting that it belongs to this package. However, the README does not mention the package name, leaving a minor transparency gap.