PHP client for jikan rest
61%
Total Score
caution
Usable with caveats: no release or commit activity in roughly 17 months points to slowing maintenance.
The project has released eight versions since March 2019, with a historically short median interval of about 15 days, but it has made no release in the last 12 months. This recent pause lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. The recent 5.0.0 release provides some evidence of prior work, so this is a maintenance concern rather than proof of abandonment.
There were no new or closed issues or pull requests in the last month, with two issues currently open. This is consistent with the lack of recent commits and modestly increases the maintenance concern.
Composer build tooling is present, but no security scanning tools are configured. That leaves a meaningful transparency gap for a maintained API client, though it does not by itself indicate unsafe code.
The single workflow uses read-only permissions and has no detected injection or high-severity findings, but all three analyzed action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-kernel Version ^7.0 | — | — |
jane-php/open-api-runtime Version ^7.6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.