Package Health

muneebkh2/api-keys

The package is very small, with no tests and one maintainer, while its declared MIT license conflicts with the included GPL-3.0 license file. Its last recorded repository activity was over two years ago, and the project has no security scanning.

Latest 1.0.3PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package had four releases clustered around February 2024, but none in the following 12 months and the package is now about two and a half years old. This strongly increases abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating that maintenance has effectively stopped.

Licensecaution

The manifest declares MIT and a license file is present, but the artifact license file was detected as GPL-3.0. This unresolved mismatch creates a real adoption and compliance concern.

Maintainerscaution

Only one registry maintainer is listed, leaving little visible publishing redundancy for a package that also shows no recent activity. The repository is user-owned, so there is no organizational backing to compensate for that thin base.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide no additional maturity or community support signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Muneeb

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform