Package Health/shqear/zoho-inventory-api

shqear/zoho-inventory-api

The codebase is tiny and the repository matches the package, while Composer is the only runtime dependency. Its maintenance evidence is weak, and the project provides no security policy or automated security scanning, so long-term support and change review remain uncertain.

Latest 0.1.8

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest in September 2019 and none in the last 12 months. This is strong evidence of an aging package with limited ongoing maintenance.

Repo commit activity

The repository had no commits and no active maintainers in the last three months, despite the package still being assessed as a dependency. The last push was in February 2022, which weakens confidence in support and fixes.

Repo tooling

Composer is used for the build, but no security-scanning tooling is present. The small package scope limits the concern, but the project offers little automated security assurance.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap for an API client.