elife/api-validator

The library includes tests, release notes, and a clear MIT license. Its small release history and no recent commit activity leave maintenance uncertain; pin v1.1.0 if adopting it.

Latest v1.1.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both published about 702 days ago, with no releases in the past 12 months. This is a meaningful maintenance concern despite the linked repository being available.

Repo commit activity

There were zero commits and zero active maintainers in the latest three months. This weakens confidence in ongoing maintenance, even though the repository metadata records a later push date.

Repo issue activity

The repository has one open issue and seven open pull requests, with no issues closed or pull requests merged in the past month. The unresolved queue suggests limited current maintenance.

Repo tooling

The project uses Make and Composer, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though it is not by itself evidence of an active defect.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
beberlei/assert Version ^3.0	—	—
guzzlehttp/psr7 Version ^1.7 \| ^2.0	—	—
psr/http-message Version ^1.0	—	—
justinrainbow/json-schema Version ^5.3 \| ^6.0	—	—