zpearl/pardot-api

Release historydanger

The package has only two releases, both in April 2020, with no release in over six years. This is strong evidence of abandonment risk for a library dependency.

Licensecaution

A LICENSE file is present, but the manifest declares MIT while the artifact and repository license text were detected as BSD-2-Clause. That mismatch reduces transparency and warrants verification.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the old registry release history, this indicates weak current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk by itself.

Security policycaution

The linked repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. That lowers maintenance transparency for an API client library.