emphaz/spotify-token-swap-php
The package is small and easy to inspect, with no runtime dependencies, tests, a README, and a matching source repository. However, its source and registry have been inactive for about nine years, and it has little adoption or security-process evidence.
42%
Total Score
50
100
75
83
Health Score Breakdown
The last registry release was published about nine years ago, with no releases in the past 12 months. This strongly suggests the package is no longer actively maintained, although its small scope may reduce the impact of infrequent releases.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the last push occurring about nine years ago. No provided signal shows current maintenance capacity.
The repository has 4 stars, 0 forks, and 1 watcher, providing little evidence of broad community adoption or external oversight. Low popularity alone is not disqualifying for a focused package, but it compounds the maintenance concern.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though the package's small codebase and lack of runtime dependencies partly limit its practical impact.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Renan GEHAN |
| Timothe PEARCE |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.