mgerarts/hn-api-php
A tested package with a README, clear MIT licensing, and a small dependency set is easy to inspect. Its single-maintainer project has had no commits for nearly nine years and no releases in that period, creating substantial abandonment risk.
46%
Total Score
25
100
75
75
Health Score Breakdown
The package has had no release in nearly nine years, with all three releases concentrated within minutes in May 2017. That strongly suggests the project is abandoned rather than actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push. The package is not archived, but there is no observed recent maintenance to compensate.
One registry maintainer is a thin publishing base, and the repository is owned by an individual rather than an organization. This increases continuity risk when there is no recent activity.
Composer is used for builds, which is appropriate for this PHP package, but no security scanning tooling is present. This is a hygiene gap rather than evidence of an unsafe release.
The repository has no published security policy, reducing transparency about vulnerability reporting and response. This matters more because there is no recent maintenance evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mark Gerarts |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle-services Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.