loantap/finvu

The stable release, explicit GPL-3.0-or-later license, and lack of install-time scripts reduce adoption friction. The tiny artifact and missing security process leave limited transparency for a library.

Latest 1.0.1

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in August 2022, with none in the last four years. This is strong evidence of abandonment risk for a package intended for API integration.

Repo commit activity

The repository had no commits and no active maintainers in the last three months, consistent with the long gap since its last push. This materially increases the risk that defects and compatibility issues will remain unaddressed.

Package file tree

The artifact and repository each contain only three files: .DS_Store, composer.json, and finvu.php. That may be enough for a very small wrapper, but it provides little visible documentation, testing, or project structure for an API library.

Package scaffolding

The release includes GitHub release notes stating that a variable name changed, which documents this version. However, it has no README, tests, or changelog, leaving consumers with little integration guidance or visible validation.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.