porto-sap/hello-api

Registry deprecationdanger

Packagist marks the entire package as abandoned and points users to the Apiato repository as a replacement, which makes this release a poor dependency target despite the available source repository.

Release historycaution

The project has 136 releases over nearly ten years, but only one release in the last 12 months; this is a substantial slowdown compared with its historical median interval of about four days.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, indicating a recent maintenance pause even though it was pushed more recently.

Repo package mentioncaution

The linked repository is owned by an organization but neither matches the package name nor mentions it in the README, so the package-to-source relationship is not clearly established.

Workflow auditcaution

Both analyzed workflows use unpinned container images, including a floating latest tag, with high-confidence findings; the audit was complete and found no untrusted checkout or script-injection path.