stevro/graphhopper-client
The repository is small but includes tests, a license, and release notes for this version. Its lack of a security policy and scanning leaves less transparency for a client handling API data.
58%
Total Score
50
83
75
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was about 23 months ago. Only three releases show a young and inactive project despite the repository remaining available.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This is a meaningful maintenance concern, though the repository is not archived.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. That is a transparency and maintenance gap rather than evidence of unsafe code.
No security policy is present, leaving vulnerability reporting and response expectations undocumented. The absence of security scanning in repo_tooling provides no compensating evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Stefan Matei |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jms/serializer Version v1.14.1 | — | — |
guzzlehttp/guzzle Version >=6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.