webkult/shirtigo-php-api-wrapper

Licensecaution

The artifact contains a license file and the repository also has one, but the manifest declares MIT while the detected license is GPL-3.0. That mismatch creates a real compatibility and transparency concern.

Release historycaution

The package has three releases over roughly 11 months, with a median interval of about 28 days. This shows initial maintenance activity, but the limited release history provides only modest evidence of long-term support.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push being about nine months before assessment, this weakens confidence that fixes will arrive promptly.

Repo toolingcaution

Composer is used for builds, which fits the package ecosystem, but no security scanning tools are configured. That is a hygiene gap rather than evidence of abandonment on its own.

Security policycaution

The repository has no security policy. For an API client handling authentication integrations, this reduces transparency around vulnerability reporting and response.