verschoof/bunq-api
The package includes tests, a release note, and a clear GPL-3.0 license. Its tiny user base and lack of security tooling add uncertainty, while the source has not been updated since June 2017.
38%
Total Score
50
58
50
Health Score Breakdown
The package has had no release in over 9 years, with only three releases overall and none in the last 12 months. This is strong evidence of abandonment risk, despite the short historical release interval.
There are no open issues or pull requests, but there has also been no issue or pull-request activity in the last month. Combined with the stale release history, this offers little evidence of active maintenance.
The repository has 1 star, 0 forks, and 1 watcher, indicating very limited adoption or community support. Popularity is only supporting evidence, but this leaves a thin external safety net for an old package.
Composer build tooling is present, but no security-scanning tools were detected. For a package handling API credentials and signed requests, that is a meaningful maintenance and transparency gap.
The repository is not archived, which provides a small counterpoint to the long period without releases. Its last push was still in June 2017, so this does not offset the maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mitchel Verschoof |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^3.6 | — | — |
guzzlehttp/guzzle Version ^6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.