Package Health

a9f/opentelemetry-auto-typo3

The project has recent activity but all recent commits come from one person, and the linked repository does not clearly identify this package. Licensing is absent, and all six workflow actions are unpinned, increasing maintenance and build-reproducibility concerns.

Latest 0.0.8PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Licensecaution

Neither the package nor the repository provides a declared or detected license file, leaving the release without clear reuse terms.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a missing README is a minor consumer-documentation gap for this integration library.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Repo bus factorcaution

One maintainer made all 13 commits in the last 3 months, leaving maintenance highly dependent on a single person with no observed handoff capacity.

Repo package mentioncaution

The repository name does not match the package name, and the README package mention could not be confirmed, so the package-to-source relationship is less transparent; the mismatch could also reflect a subproject layout.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-core
Version ^12.4 || ^13.4
—
—
typo3/cms-extbase
Version ^12.4 || ^13.4
—
—
open-telemetry/api
Version ^1.7
—
—
open-telemetry/sdk
Version ^1.10
—
—
typo3/cms-frontend
Version ^12.4 || ^13.4
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
9 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform