Package Health

tobycroft/btapi

This is a usable but relatively young package with a clear MIT license, a matching repository, stable v1.3.0 releases, recent commit activity, and no deprecation or install-time lifecycle scripts. However, it has only 93 days of release history, one maintainer and one active contributor responsible for all nine recent commits, no tests or changelog, no security policy, and no security-scanning tooling. The package is therefore reasonable to evaluate for adoption, but its limited maturity and concentrated maintenance create meaningful continuity and verification risk.

Latest v1.3.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access. Since the repository is user-owned rather than organization-owned, this represents a genuine publishing continuity concern.

Package scaffoldingcaution

A substantive README and GitHub Releases provide useful documentation and release evidence, but neither the artifact nor repository contains tests or a changelog, limiting verification and maintenance transparency.

Project backingcaution

The repository owner is an individual user, not an organization, so there is no organizational backing to compensate for the concentrated maintainer and contributor base.

Release historycaution

The package is only 93 days old with three releases and a median interval of about 47 days, so it shows some release activity but has limited evidence of long-term maturity.

Repo bus factorcaution

One contributor made all nine commits in the last three months, creating a complete bus-factor concentration in a user-owned project with no organizational backing signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

tobycroft

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
15 days ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform