Package Health

m1guelpf/ghost-api

Usable with caveats: the package is licensed, tested, documented, and not deprecated, but it has had no release or commit activity for over five years. Its small, single-maintainer project also lacks a security policy, so verify compatibility before adopting it.

Latest v1.1.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

38

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than five years without a release. This is the strongest evidence that ongoing maintenance should not be expected.

Maintainerscaution

One registry maintainer is consistent with the repository being owned by the same individual, but it leaves little visible publishing redundancy if that maintainer stops responding. The long inactivity makes this thin maintainer base more relevant.

Project backingcaution

The registry namespace and repository are owned by the same individual, showing a consistent project identity. The user-owned project has no organizational backing shown, so continuity depends mainly on one maintainer.

Release historycaution

The latest release was published over five years ago, with no releases in the last 12 months and only three releases overall. This indicates substantially reduced maintenance activity for a library dependency.

Repo issue activitycaution

There are two open issues and one open pull request, but none were opened, closed, or merged in the last month. Unresolved work without recent response is a maintenance concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Miguel Piedrafita

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.1|^7.2

Weekly Downloads

Info

Last Published
5 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform