post-hawk/hawk-api

The repository is not archived, and the release has a clear MIT license, focused contents, documentation, and no install-time scripts. Its small public footprint and lack of security tooling provide little additional assurance for a dependency.

Latest 1.0.3

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in roughly 10 years; its four releases were concentrated in May and June 2016, so there is no evidence of ongoing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity.

Repo popularity

The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad support base.

Repo tooling

Composer is used for building, but no security scanning tool is reported. That is a modest hygiene gap rather than evidence of an unsafe release by itself.

Security policy

No security policy was found. This is a transparency gap, though the package's long inactivity is more consequential than the missing policy.