Package Health

fw4/realo-api-client

Usable with caveats: the package is a stable, MIT-licensed client backed by an identifiable organization and is not deprecated or archived. However, its release history is sparse, there were no commits in the last three months, and the small repository has no tests or security policy.

Latest v1.0.4PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package file treecaution

The nine-file tree is coherent for a small API client and includes source files, examples, Composer metadata, and build configuration. Its minimal structure also confirms there is no packaged test suite to support maintenance confidence.

Package scaffoldingcaution

The package includes a substantial README, but has no tests or changelog in either the artifact or repository. GitHub Releases provide some release transparency, but the missing validation and history remain a maintenance gap.

Release historycaution

Only two releases have been published across about 29 months, with a median interval of about 521 days and one release in the last 12 months. This indicates a slow maintenance cadence, although a recent release exists.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is the clearest maintenance concern, even though the recent push and latest release show the project is not wholly abandoned.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no pull requests were merged. This gives little evidence of active community maintenance, though the issue count itself is unavailable.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.3.0|^7.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform