Package Health

taksolder/chatwork

The MIT license, tiny dependency surface, release notes, and matching repository make the package easy to inspect. Its single-author project has no visible security policy and shows little support for a very old API client.

Latest v0.2.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

Only two releases exist, with none in the last 12 months; the latest release was published in April 2017, about 9 years ago. This is strong evidence of abandonment risk for a client library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release hiatus. No provided activity signal shows ongoing maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The small codebase limits the significance of this gap, though it provides little evidence of active security maintenance.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. This matters more for an API client handling authentication tokens.

Version stabilitycaution

Version v0.2.0 is not a prerelease, but it remains below 1.0, so the API may be less mature or stable than a major release. The long period without newer versions makes this a secondary concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

tak-solder

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform