f-dg/kochava-api-sdk
It includes useful documentation and tests, but has no license and no security policy, reducing transparency. Its small dependency set and lack of install scripts limit exposure, but do not offset the maintenance concern.
38%
Total Score
56
75
Health Score Breakdown
The package has only one release, published about 8 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the repository is still available and not archived.
There is no declared license, license file, or detected repository license file. That creates a material legal and transparency gap for dependency adoption.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counts provide little evidence of external adoption or community support.
Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository is not archived, which is a compensating sign, but its last push was about 8 years ago and therefore does not indicate active maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Firsov Dmitry |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.