Package Health

zxin/express

Latest v2.0.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

61

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in September 2023 despite being over four years old. This indicates substantially reduced maintenance activity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history and raising abandonment risk.

Licensecaution

No registry license declaration, license file, or repository license file was detected. This creates a material reuse and transparency concern for a dependency.

Maintainerscaution

Only one registry publishing account is listed. Because the repository owner is an individual rather than an organization, the thin maintainer base adds some continuity risk.

Package scaffoldingcaution

The published package has no README, tests, or changelog. Missing tests and changelog are normal for an artifact, but the absent README is a documentation gap for a library consumers must integrate.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

zxin

Direct Dependencies

DependencyLast ReleaseScore
cuyz/valinor
Version ^1
—
—
guzzlehttp/guzzle
Version ^7.4.2
—
—
composer/ca-bundle
Version ^1.3
—
—
symfony/polyfill-php81
Version ^1.25.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform