faudit/fauditapi

Risky to adopt without a maintenance plan: this small PHP client has had no release or commit activity since November 2022 and has no visible community activity. It is licensed, documented, non-deprecated, and backed by a matching organization repository, but the long-term abandonment risk is substantial.

Latest 1.0.1

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both published in November 2022, with no releases in the last 12 months and roughly 3 years and 10 months since the latest release. This is a strong maintenance concern for an API client.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the long release gap. The repository is not archived, but there is no observed recent development to compensate.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little evidence of external adoption or community support. Popularity is supporting evidence rather than decisive on its own, so this is a caution rather than a standalone severe risk.

Repo tooling

Composer is used for builds, but no security-scanning tooling is present. The build setup is appropriate for the package, while the missing scanning is a modest transparency and maintenance gap.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This matters for a client that handles API access, although the absence of a policy is less severe than the lack of maintenance activity.