alapi/acme-client

Project backingcaution

The repository is owned by an individual rather than an organization, so the package has less visible institutional backing to compensate for its single-release and inactive-maintenance profile.

Release historycaution

This is the package's only release, published over a year ago, with no releases in the last 12 months. That leaves limited evidence of sustained maintenance for a security-sensitive library.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the package's single-release history. This materially increases the risk that defects or protocol changes will go unaddressed.

Repo popularitycaution

The repository has only 2 stars, 1 fork, and no watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of external review or adoption.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a library handling certificate and account operations, that is a meaningful hygiene gap.