The small, tested codebase has a clear MIT license and organization ownership. It lacks a security policy and security scanning, leaving little evidence of ongoing maintenance or security practice.
42%
Total Score
100
67
50
The package has only one release, published over 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the stable 1.0.0 version.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful adoption signal to offset the stale activity.
Composer build tooling is present, but no security scanning tools were detected. The build setup is adequate, while the missing security practice modestly lowers confidence.
The repository is not archived, which is a positive counter-signal, but it was last pushed over 10 years ago. Its active status does not compensate for the prolonged inactivity.
No security policy was found in the repository. This is a transparency and maintenance gap for a package that has had no activity for over 10 years.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
knplabs/github-api Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.