annatech/capi

Integration carries extra maintenance overhead, and security reporting is limited. The package has 43 runtime dependencies, no tests or security policy, and its license metadata differs from the detected license text.

Latest 2.0.0-alpha

Packagist

32%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published about seven years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the repository still being available.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially reduces confidence in ongoing maintenance.

Dependency profile

The package declares 43 runtime dependencies and no development dependencies, creating substantial transitive maintenance and compatibility burden for a library described as a bundled working snapshot.

License

A GPL-2.0+ manifest declaration and license files are positive, but the detected artifact license is GPL-2.0, which does not exactly match the declared version range and should be clarified.

Security policy

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. The absence of security scanning tools reinforces this transparency gap.