zhujinkui/notice
The package has a clear Apache-2.0 license and a matching repository, but little supporting maintenance infrastructure. Its tiny scope may limit exposure, yet adopting an unmaintained dependency creates ongoing compatibility risk.
42%
Total Score
0
67
75
Health Score Breakdown
The package has only one release, published about six years ago, with no releases in the last 12 months. This strongly suggests abandonment or an unmaintained release line.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since its only release.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to compensate for the lack of maintenance activity.
Composer is used for builds, but the repository reports no security scanning tools. The missing scanning is a modest transparency gap, while the build tooling is appropriate for the package.
The repository has no security policy. For a small library this is not decisive, but it leaves vulnerability-reporting expectations unclear alongside the stale maintenance record.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 zhujinkui |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pda/pheanstalk Version 3.2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.