dsweixin/api-auth

Risky to adopt: the latest release and repository activity are from December 2017, with no releases or commits in the past eight years. It has a README, an MIT license, and no install-time scripts, but the long abandonment period is a significant liability for an authentication package.

Latest 1.1.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than eight years, with all three releases concentrated around December 2017. This strongly indicates abandonment and outweighs the otherwise stable release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the last push occurring in December 2017. There is no evidence of ongoing maintenance for a security-sensitive authentication library.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful external adoption signal to offset the age and inactivity.

Repo tooling

Composer is used for builds, which is appropriate, but no security scanning tools are configured. The lack of scanning is a hygiene concern rather than evidence of malicious behavior.

Repository archived

The repository is not marked archived, but its last push was in December 2017. The unarchived status does not compensate for the prolonged lack of activity.