nicklasw/pkm-go-api

Release historydanger

The package has had no releases in about 9 years: all 6 releases arrived between December 27 and December 31, 2016, with none in the last 12 months. This is strong evidence of abandonment for a library that depends on changing APIs.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity since December 2016. The long period without maintenance materially raises compatibility and abandonment risk.

Licensecaution

A license file is present, but the manifest declares MIT while the artifact license file is detected as BSD-2-Clause. The package is licensed, yet the mismatch creates avoidable legal and maintenance ambiguity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For a package with 10 runtime dependencies, the absence of automated dependency or security checks is a modest hygiene concern.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less serious than the lack of maintenance activity.