kirilcvetkov/tesla-api
The package is licensed, documented, tested, and backed by a matching, non-archived repository. Nearly two years without a release or recent commit activity, plus two unpinned workflow actions and no security policy, make continued maintenance uncertain.
58%
Total Score
50
83
50
Health Score Breakdown
The latest release was nearly two years ago, and there were no releases in the last 12 months. This is a meaningful maintenance concern despite the package having six releases overall.
There were no commits and no active maintainers during the last three months. Combined with the old latest release, this indicates that maintenance may have stopped.
The repository has no security policy. For a package that handles Tesla authentication and access tokens, this is a transparency gap, though it is not evidence of malicious behavior.
The assessed version is v0.1.2, so the package remains below a stable 1.0 release. It is not marked as a prerelease, which partly offsets the maturity concern.
The workflow audit completed successfully and found read-only permissions with no dangerous sinks or audit findings. However, both analyzed action uses are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kiril Cvetkov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webmozart/assert Version ^1.11 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.