Package Health/torchlighttechnology/xverify-client-api

torchlighttechnology/xverify-client-api

The repository is only three files and has no tests or security policy. It has a README, stable version, organization backing, and no install scripts, but the release history provides little evidence of ongoing support.

Latest v2.0.1

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about eight years: all four releases occurred on May 30, 2018, with none in the last 12 months. This is strong evidence of abandonment risk despite the stable latest version.

License

No license is declared and no license file was detected in either the package or repository. That leaves the release without clear permission for downstream use.

Package file tree

The package and repository each contain only three files, including one PHP source file and a short README. That small footprint may fit a narrow client, but it provides little evidence of mature project support.

Repo issue activity

The repository has one open issue and no new or closed issues or pull requests in the last month. Combined with the old release history, this offers little evidence of active maintenance.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence of unsafe code.