jeyroik/kb-api

Release historydanger

This package has only one release, published nearly seven years ago, with no releases in the last 12 months. That strongly suggests the project is no longer actively maintained.

Repo commit activitydanger

There were no commits or active maintainers in the last three months, and the repository's last push was nearly seven years ago. This is strong evidence of abandonment risk.

Dependency profilecaution

The package declares five runtime dependencies and no development dependencies. This creates some dependency maintenance surface, though the signal does not show those dependencies are unsafe or stale.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no additional confidence in ongoing project support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap, not a standalone supply-chain danger.