Package Health

a.treschilov/tinkoff-invest-api-sdk

Documentation, tests, and licensing are in place, while the repository remains maintained. Its narrow contributor base and lack of security tooling warrant routine ownership checks.

Latest v0.3.17PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo bus factorcaution

One contributor made 80% of the 5 recent commits, creating concentration risk, although a second contributor was active during the same period.

Repo popularitycaution

The repository has only 5 stars and 1 fork, indicating limited adoption evidence; this is a supporting concern rather than a health verdict because maintenance is active.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found, so vulnerability reporting expectations are not documented.

Version stabilitycaution

Version v0.3.17 is not a prerelease, but the package remains below major version 1, so compatibility maturity is somewhat limited.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aleksey Treschilov

Direct Dependencies

DependencyLast ReleaseScore
grpc/grpc
Version ^1.57.0
—
—
google/protobuf
Version ^4.29.2
—
—
google/common-protos
Version ^v4.8.3
—
—

Weekly Downloads

Info

Last Published
10 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform