Package Health

flooris/trustpilot-api

The MIT license, release notes, and modest dependency set make the package easy to evaluate. Its long maintenance gap and unclear repository ownership make future fixes and support harder to trust.

Latest v0.9.0PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

50

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was in January 2022, with no releases in the following four years. That is strong evidence of abandonment risk for a library users may need to keep compatible with current PHP dependencies.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project that has not seen active maintenance. Combined with no releases for years, this materially raises abandonment risk.

Repo package mentiondanger

The linked repository name does not match the package name, and its README does not mention the package. That makes it unclear whether the repository is actually the package's source, despite the matching owner namespace.

Repo popularitycaution

The repository has zero stars and one fork, so there is little visible community adoption or outside support. Popularity is supporting evidence rather than a verdict, but it provides no meaningful buffer here.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than proof of unsafe code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tom Kuijer

Direct Dependencies

DependencyLast ReleaseScore
nesbot/carbon
Version 2.50.0
guzzlehttp/guzzle
Version ^6.2
symfony/translation
Version v4.4.26

Weekly Downloads

Info

Last Published
4 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform