yuec/yii2-tencent-cmq

The MIT license and lack of install-time scripts reduce adoption friction. Documentation is extremely sparse, and the project shows little evidence of ongoing maintenance or security process; pinning this release carries substantial abandonment risk.

Latest v0.01

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published 8 years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the last push occurring 8 years ago. This materially increases abandonment risk.

Package scaffolding

The artifact includes a README, but it is only 18 characters long; no tests or changelog are present. Missing tests and changelog are normal packaging practice, while the minimal README limits consumer guidance.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but there is little community activity to compensate for the absent maintenance.

Security policy

The repository has no security policy. For a small package this is a hygiene gap rather than a severe risk, but it provides no stated process for reporting or handling vulnerabilities.