yubin/cdemo

The package is licensed and has a tiny dependency surface, but it offers little evidence of verification. Its minimal scope reduces complexity, though that does not offset the lack of recent maintenance signals.

Latest 1.0.0

Packagist

44%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 5 years and 9 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the stable 1.0.0 version.

Repo popularity

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not required for a small package, but these counters provide no supporting evidence of community adoption or oversight.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. This is a modest hygiene gap rather than a severe supply-chain concern.

Repository archived

The repository is not archived, which is positive, but it was last pushed about 5 years and 5 months ago. The long period without repository activity still weakens confidence in ongoing maintenance.

Security policy

The linked repository has no security policy. For a package intended as a dependency, that reduces transparency around vulnerability reporting and maintenance response.