zhouzhiguo/zzg
The package is tiny and has no security policy, which limits transparency. Its single registry maintainer and zero repository popularity provide little evidence of review capacity.
38%
Total Score
33
50
61
75
Health Score Breakdown
This is the only release, published about five years ago, with no releases in the last 12 months. That leaves substantial uncertainty about ongoing maintenance and compatibility.
There were zero commits and zero active maintainers in the last three months. Combined with the old release history, this is strong evidence of inactive maintenance.
The package declares two runtime requirements, PHP and php-cs-fixer. The profile is small, though placing a code-formatting tool among runtime dependencies is unusual and adds avoidable dependency surface.
Neither the package nor the linked repository declares or contains a recognized license file. This creates a real transparency and adoption concern for downstream users.
The artifact contains only four files, including a source file and Composer metadata. This is consistent with a very small package, but offers little evidence of engineering maturity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 zhouzhiguo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 friendsofphp/php-cs-fixer Version dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.