Package Health

exorcist-guo/tron-api

The package includes tests, a clear README, and an MIT license. Its matching repository and Composer build setup improve transparency, but the project offers limited security-process evidence.

Latest 2.1PackagistPackagist

56%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

Only two releases exist, both published within about 15 hours, followed by more than a year without a new release. That weakens evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment concern.

Repo popularitycaution

The repository has 0 stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but there is no visible community signal to offset the weak activity record.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling was detected. This is a modest transparency and maintenance-process gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shamsudin Serderov

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.2
—
—
kornrunner/secp256k1
Version ^0.2
—
—
simplito/elliptic-php
Version ^1.0
—
—
exorcist-guo/data-types
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform