xuqiangshui/compoer
The package has a clear MIT license, substantial documentation, tests, and no install-time scripts. Its repository has no security policy and no recorded commit activity, leaving maintenance and security ownership uncertain.
35%
Total Score
0
75
75
Health Score Breakdown
This is the only release, published over five years ago, with no releases in the last 12 months. That strongly suggests the package is abandoned rather than actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old one-release history, this is strong evidence of inactive maintenance.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no visible community or adoption signal to offset the inactivity.
Composer is used as a build tool, which is appropriate, but no security-scanning tools were detected. This leaves the inactive project with less visible automated security coverage.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a package that includes an Elasticsearch client and related code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 xuqiangshui |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 gregwar/captcha Version dev-master | — | — |
leancloud/leancloud-sdk Version dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.