ziyanco/library

The single-user project lacks tests, a security policy, and security scanning. A short README, exact-version release notes, and a non-archived repository provide some transparency, but not enough to offset the maintenance concerns.

Latest 1.0.12

Packagist

44%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases, but none in the last two years; the latest release was in September 2024. This is strong evidence of stalled maintenance for a package with multiple integrations.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing ongoing care.

License

The manifest declares “deving,” but no license was detected and no license file is present in either the package or repository. That leaves reuse and redistribution rights unclear.

Maintainers

Only one registry account has publish access, and the repository is owned by an individual rather than an organization. That creates a thin publishing and continuity base, with no other provided evidence of active contributors.

Repo tooling

Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a modest hygiene concern rather than evidence of unsafe code by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

ziyan

Direct Dependencies

Dependency	Last Release	Score
hyperf/redis Version ~3.1.0	—	—
hyperf/guzzle Version ^3.1	—	—
hyperf/framework Version ~3.1.0	—	—
wechatpay/wechatpay Version ^1.4	—	—
yurunsoft/phpmailer-swoole Version ^1.0	—	—