ethanzway/iap
The package is small and its repository clearly matches the package, while install-time scripts are absent. The declared MIT license conflicts with the detected Apache-2.0 license file.
43%
Total Score
50
67
75
Health Score Breakdown
A license file is present, but its detected Apache-2.0 text conflicts with the manifest's MIT declaration. The licensing terms should be clarified before adoption.
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this indicates a thin publishing and continuity base.
This package has only one release, published over three years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.
The repository had no commits and no active maintainers in the last three months, consistent with the package's long release gap and increased abandonment risk.
Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ethan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version * | — | — |
guzzlehttp/guzzle Version * | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.