Package Health/zrone/service-governance-nacos

zrone/service-governance-nacos

The MIT license and small runtime dependency set make adoption easier to assess. Maintenance and project hygiene are weak, with no activity since July 2021, no tests or README, no security policy, and an incomplete workflow pinning setup.

Latest v2.2.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over five years: its latest release was July 2021, with four releases total and none in the last 12 months. This is strong evidence of abandonment risk, although the repository is not archived.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Package scaffolding

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a missing README reduces transparency for a library consumers must integrate with.

Repo tooling

Composer is used for builds, which is appropriate, but the repository reports no security scanning tools. This is a hygiene gap that adds modest maintenance risk rather than making the release unfit on its own.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This weakens transparency for a package used in service infrastructure.