Package Health

xycc/winter

winter

Latest 0.0.3PackagistPackagist

34%

Total Score

unhealthy

Risky: no releases or repository activity since June 2021, with only three releases overall.

Health Score Breakdown

Release historydanger

The package has only three releases, all concentrated in June 2021, and none in the last 12 months despite being about 5 years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push occurring in June 2021. This materially increases abandonment risk.

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during dependency setup. This is not inherently unsafe, but it adds behavior that dependents must account for.

Package scaffoldingcaution

The artifact contains tests, which is a small positive, but it has no README or changelog. The missing README reduces transparency for consumers of this application-oriented package.

Repo popularitycaution

The linked repository has 1 star and no forks, providing little supporting evidence of community use or review. Popularity is only supporting evidence, so this reinforces rather than determines the score.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

xycc

Direct Dependencies

DependencyLast ReleaseScore
xycc/framework
Version dev-master
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform