clue/packagist-api-react
Simple async access to packagist.org's API, like listing project details, number of downloads etc., built on top of ReactPHP.
62%
Total Score
caution
Usable with caveats: no release since February 2019, with repository activity also largely stopped.
Health Score Breakdown
The latest release was in February 2019, about 7 years ago, and there were no releases in the preceding 12 months. This materially raises maintenance and compatibility risk despite the package's long history.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, which is a limited compensating signal but does not show current maintenance.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it is less severe than evidence of unsafe workflow behavior.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 of 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christian Lück |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 clue/buzz-react Version ^2.5 | — | — |
rize/uri-template Version ^0.3 | — | — |
knplabs/packagist-api Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.