plhw/hf-api-client

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file in the package or repository. That creates a material legal and transparency concern for a package presented as open source.

Release historycaution

The package has 26 releases over roughly nine years, but no release in the last 12 months; the latest release was in September 2023. This is a meaningful maintenance concern despite the historically regular release interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although it was pushed in January 2025, the current absence of development activity raises abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues and five pull requests remain open. This suggests unresolved maintenance backlog and limited current responsiveness.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap, partly offset by the repository's otherwise identifiable build setup.