yuxiaoyang/rander

The package has a clear README, a minimal Composer layout, and no install-time scripts. It has seen no release or repository activity since April 2017, with no tests, security policy, or scanning evidence.

Latest 1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a single-release package first published in April 2017, with no releases in the last 12 months. That long period without version updates is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for years.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful community or maintenance signal.

Repo tooling

Composer is used as the build tool, which fits the package, but no security scanning tools are present. For a small package this is a hygiene gap rather than a standalone severe risk.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This matters alongside the package's long inactivity, though it is not severe on its own.