volabit/client

Release historydanger

The package has only 3 releases, all between February and April 2015, with no release in about 11 years. This strongly indicates abandonment despite the stable v1.0.2 version.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. This is a substantial maintenance risk for an API client.

Repo issue activitycaution

There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is consistent with an inactive project, though it is weaker evidence than the release and commit history.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a hygiene gap rather than evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The absence matters more because the package handles API authentication flows.