zyuyou/workerman

Its stable version, MIT license, small dependency set, and clear README support straightforward integration. Maintenance has effectively stopped for over 11 years, with no recent commits, no security policy, and minimal repository adoption signals.

Latest v3.1.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in May 2015, with no releases in the last 12 months and only five releases overall. This is strong evidence of abandonment risk for a dependency receiving no recent maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this materially increases abandonment risk.

Project backing

The repository is owned by an individual user rather than an organization, so the single registry maintainer does not benefit from visible organizational backing.

Repo popularity

The repository has one star, zero forks, and one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.

Repo tooling

Composer is used as a build tool, which is appropriate for this package, but no security scanning tools were detected. The missing scanning is a hygiene gap that adds little weight compared with the maintenance evidence.