core23/lastfm-api

Registry deprecationdanger

Packagist marks the package abandoned and identifies nucleos/lastfm as the replacement, which is a direct adoption risk for this release despite other evidence of ongoing project activity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating recently stalled development; the 2025-11-29 release provides only limited compensation.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention core23/lastfm, so package ownership or repository linkage is less transparent; the organization backing reduces but does not remove this concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a library that handles API connections.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but both of the two action references are unpinned, leaving their exact revisions uncontrolled.