Package Health

jeffrey-kroonen/bol-retailer-api-php

A PHP Client to interact with the Bol.com Retailer API

Latest v3.0.1PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Dependency profilecaution

The package has five runtime dependencies, a moderate dependency surface for a PHP API client. This is not inherently excessive, though each dependency adds some maintenance exposure to an otherwise inactive project.

Release historycaution

The latest release was on June 22, 2023, with no releases in the last 12 months. That long release gap materially raises abandonment and compatibility risk for an API client.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the README's statement that no future releases are planned. This is strong evidence of inactive maintenance.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, providing little external adoption evidence. Popularity is supporting evidence rather than a verdict, so this modestly reduces confidence in project maturity.

Security policycaution

No security policy was found in the repository. This is a transparency gap, though it is secondary to the more significant evidence that active maintenance has stopped.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jeffrey Kroonen

Direct Dependencies

DependencyLast ReleaseScore
nesbot/carbon
Version ^2.67
—
—
guzzlehttp/guzzle
Version ^7.4
—
—
phpseclib/phpseclib
Version ^3.0
—
—
symfony/http-foundation
Version ^6.1
—
—
jane-php/json-schema-runtime
Version ^7.4
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform