aternos/curseforge-api

Usable with caveats: the package is licensed, documented, tested, actively published, and backed by a non-archived organization repository. Maintenance has slowed, with no commits or active maintainers in the last three months, and the repository lacks security scanning and a security policy.

Latest 3.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for 1,237 days with 17 releases, but only one release in the last 12 months, indicating a slower release cadence despite the current release being recent.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern, although the current release and a recently merged pull request provide some compensating evidence.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected; this is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

No repository security policy was found, leaving users without documented instructions for reporting vulnerabilities.

Token permissions

The only workflow has no top-level permissions declaration and does not explicitly restrict its token, which is weaker workflow hygiene than a read-only or explicitly scoped configuration.