crawlora/spotify

Crawlora Spotify API client with 38 endpoints for search, tracks, albums, artists, playlists, profiles, audiobooks, charts, and podcast shows and episodes

Latest v0.1.1

Packagist

68%

Total Score

caution

Two releases arrived within a day, but all 45 workflow actions are unpinned and release automation installs an unlocked package.

Health Score Breakdown

Release history

The package is very new, with two releases over about 21 hours. This shows active initial publication but provides little evidence of longer-term maintenance.

Repo commit activity

There were no commits from active maintainers in the last three months, although the repository was recently pushed and recorded three merged pull requests in the last month. The activity history is therefore limited but not clear abandonment evidence.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving a modest maintenance-hygiene gap.

Version stability

Version 0.1.1 is not yet on a stable major version, so compatibility and API maturity remain less established.

Workflow audit

All 45 action references are unpinned, and the release workflow installs a package outside a lockfile; both weaken reproducibility. Trusted publishing also uses long-lived credentials, while the cache findings are low confidence and the workflows otherwise use read-only permissions.