Package Health

ufado/tron-api

It has a clear MIT license, a useful README, tests, and release notes for this version. Its small footprint and absent security policy provide less transparency for a library handling blockchain transactions.

Latest 1.1PackagistPackagist

57%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has only two releases, both in May 2024, with no release in about two years and four months. This materially raises maintenance and abandonment concerns, though the latest release is stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and suggesting inactive maintenance.

Repo popularitycaution

The repository has 6 stars, 2 forks, and 2 watchers, providing little supporting evidence of broad community review or maintenance capacity. Low popularity alone is not a severe concern for a small package.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a package that handles blockchain and transaction functionality.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shamsudin Serderov
ufado

Direct Dependencies

DependencyLast ReleaseScore
iexbase/web3.php
Version ^2.0.1
—
—
guzzlehttp/guzzle
Version ^7.0
—
—
kornrunner/secp256k1
Version ^0.1.2
—
—
simplito/elliptic-php
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform