Package Health/zhu2688/framework-installer-plugin

zhu2688/framework-installer-plugin

The package is small and clearly identified, with an MIT license and only one runtime dependency. Its repository has no tests or security policy, while the project shows little evidence of ongoing maintenance or review.

Latest 0.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, version 0.0.1, published about eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, though the package is not marked deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows recent maintenance to compensate for this inactivity.

Repo popularity

The repository has zero stars and forks and only one watcher, providing little community evidence or backup around this dependency. Popularity is supporting evidence rather than a verdict, so this adds only a modest concern.

Repo tooling

Composer is used for the build, but no security scanning tool is configured. This is a review and maintenance gap, not evidence that the package is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The small package scope limits the impact, but there is no provided compensating control.