valeryverkhoturov/wb-api-client
The project is only four days old, with seven releases and no measured commits in the past three months, so its maintenance record is too short to establish durability. The Apache-2.0 license, detailed README, release notes, and absence of install scripts provide useful transparency.
62%
Total Score
50
100
88
83
Health Score Breakdown
One registry maintainer is consistent with a user-owned project, but it leaves a thin operational base if that person becomes unavailable.
The package is only 4 days old and has 7 releases, arriving about every 18 hours; this shows active initial publishing but provides little evidence of long-term maintenance.
The repository reports 0 commits and 0 active maintainers over the past 3 months, so there is no established historical maintenance record; the same-day push partly offsets this for a newly created project.
Composer is used as the build tool, but no security scanning tools were detected. That is a modest supply-chain hygiene gap rather than evidence of abandonment.
No security policy was found in the repository, reducing transparency for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Valery Verkhoturov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^2.7 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Weekly Downloads
Info
- Last Published
- 13 hours ago
- Created
- 5 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.