Package Health/aurigma/asset-generator-api-client

aurigma/asset-generator-api-client

This release appears usable and reasonably maintained, with a stable non-prerelease version, three releases over the past 90 days, a non-archived repository updated on the assessment date, and organization backing from Aurigma. The main concerns are limited demonstrated maintenance depth—only two commits from one contributor in the past three months—along with no repository tests, changelog, security policy, or security-scanning tools. The package is licensed through both its manifest and License.md, but its proprietary license should be reviewed for compatibility before adoption.

Latest 1.37.1.34181

Packagist

73%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package has seven runtime dependencies, including PHP extensions, Guzzle, and an OpenID Connect library. This is a meaningful dependency surface for an API client, but not inherently excessive for its stated functionality.

Package scaffolding

A substantive README is present, but the artifact and repository contain no tests or changelog. For an API client this is a genuine transparency and maintainability gap, though the documentation does explain prerequisites and usage.

Release history

The package is only 90 days old with three releases and a median interval of about 45 days, showing ongoing publication but limited historical maturity.

Repo bus factor

All two recent commits came from one contributor, creating concentration risk. Because the repository is organization-owned, handoff capacity partly compensates, but no second active contributor is evidenced.

Repo commit activity

The repository received two commits in the past three months from one active maintainer, demonstrating recent maintenance but at a low cadence and with limited capacity.