friendsofapi/fortnox

The MIT license, focused dependency set, tests, and release notes make the package transparent to inspect. Its small project footprint and absent security policy provide little ongoing assurance.

Latest 0.2.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly six years, despite six releases overall. That long gap strongly raises abandonment risk for an API client whose upstream service may change.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. Earlier activity does not compensate for this prolonged lack of maintenance.

Repo issue activity

There is one open issue, but no new or closed issues and no pull-request activity in the last month. This provides no evidence of current issue handling.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a maintenance and transparency gap, though it is secondary to the inactivity evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tobias Nyholm

Márk Sági-Kazár

Direct Dependencies

Dependency	Last Release	Score
php-http/httplug Version ^1.0 \|\| ^2.0	—	—
php-http/discovery Version ^1.0	—	—
php-http/client-common Version ^1.10 \|\| ^2.0	—	—
php-http/multipart-stream-builder Version ^1.0	—	—