sakdeniz/aras-kargo-php-api
The small maintainer base and lack of security scanning reduce resilience. The package has clear documentation and no install-time scripts, but its last release and repository update were over five years ago, and the license declaration conflicts with the detected license file.
38%
Total Score
25
75
75
Health Score Breakdown
The package has had no release in over five years, with zero releases in the last 12 months; this is strong evidence of abandonment for a dependency receiving ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing maintenance risk.
The manifest declares MIT, but the artifact license file is detected as GPL-3.0; although a license file exists, the mismatch creates uncertainty about permitted use.
Only one registry publishing maintainer is listed, leaving limited visible capacity to respond to issues or publish fixes; no organizational backing is shown.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 İsmail Satilmiş |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.