PHP Package for the (unofficial) Spotify Artists API
58%
Total Score
0
86
75
The package has 10 releases with a median interval of about 65 days, but it has had no releases in more than three years, which materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's long release gap and indicating inactive maintenance.
The repository has no security policy, which is a transparency and vulnerability-reporting gap for a maintained API package, though it is not severe on its own.
The single workflow was fully analyzed with no reported audit findings or untrusted-trigger sinks, but all three action references are unpinned, leaving avoidable build reproducibility and supply-chain risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/serializer Version ^5.4|^6 | — | — |
symfony/http-client Version ^5.4|^6 | — | — |
pouler/spotify-login Version ^0.3 | — | — |
symfony/property-access Version ^5.4|^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.