Package Health

redwebcreation/twitter-stream-api

It has a clear README, tests, MIT licensing, and release notes for this version. Unpinned workflow actions and no published security policy reduce maintenance transparency.

Latest 2.2.1PackagistPackagist

57%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 18 releases and a stable history, but its latest release was in May 2023, about three years and four months ago, with none in the last 12 months.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, reinforcing the broader concern that maintenance has stalled.

Repo issue activitycaution

There are two open issues and no issue or pull-request activity in the last month, providing no evidence of current support activity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings, and they avoid dangerous triggers and untrusted checkouts. However, all 6 action references are unpinned, which weakens build reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Félix Dorn

Direct Dependencies

DependencyLast ReleaseScore
psr/http-message
Version ^1.0.1|^2.0
guzzlehttp/guzzle
Version ^7.3

Weekly Downloads

Info

Last Published
3 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform