los/api-server
The MIT license, matching repository, and release notes improve transparency. Limited security tooling and loosely pinned workflow actions reduce confidence in the release process, while the project remains dependent on one active contributor.
58%
Total Score
50
50
83
75
Health Score Breakdown
Thirteen runtime dependencies make the package rely on a moderately broad dependency chain, adding some maintenance exposure without evidence of an unusually excessive profile.
Only one registry account has publish access. This is a modest resilience concern, though registry access alone does not measure the project's actual maintenance capacity.
The repository is owned by an individual user rather than an organization, so the single-contributor concentration has no shown organizational handoff capacity to compensate for it.
The package has 29 releases over roughly 10 years, but it has had no registry release in the last three years, which is a meaningful maintenance concern.
All recent commits came from one contributor, so maintenance knowledge and release capability are concentrated in a single person.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leandro Silva |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 los/uql Version ^1.1 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
mezzio/mezzio-hal Version ^2.0 | — | — |
mezzio/mezzio-helpers Version ^5.6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.