chatbox-inc/apiauth
The package includes tests, a README, and a small dependency footprint. It also lacks a license and has no recent maintenance evidence, so pinning it creates long-term ownership risk.
34%
Total Score
50
67
75
Health Score Breakdown
The package is about 10 years old, has only three releases, and has had no release in roughly 10 years. This strongly indicates abandonment despite the early short release interval.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being roughly eight years ago. No provided maintenance signal compensates for this inactivity.
No license is declared, and neither the package nor the linked repository contains a detected license file. This creates a material adoption and redistribution concern.
The package runs a post-install command, which adds install-time behavior that should be understood before adoption. The available evidence does not show that it is malicious, but it is an avoidable supply-chain exposure in an otherwise old package.
The repository uses Composer and Make, showing basic build tooling, but it has no detected security-scanning tooling. This is a minor hygiene gap beside the much larger maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 mikakane |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chatbox-inc/token Version 0.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.