Kafka client for php
38%
Total Score
unhealthy
Risky: maintenance appears abandoned, with no releases or commits for over six years and conflicting license metadata.
The package has had no release in over six years; all 16 releases occurred on the same day and there were none in the last 12 months. This is strong evidence of abandonment for a dependency.
There were zero commits and zero active maintainers in the last three months. Combined with the long release gap, this indicates that maintenance capacity is currently absent.
A LICENSE file is present in both the artifact and repository, so licensing is not absent. However, the registry declares BSD-3-Clause while the detected file license is Apache-2.0, and that mismatch needs clarification before adoption.
The repository is not archived, which avoids a formal abandonment marker, but its last push was over six years ago and does not offset the inactive release history.
The package remains on the 0.x line, and the recorded latest version is v0.2.0.7 while this release is v0.2.0.8. The release is not marked as a prerelease, but the immature version line adds some uncertainty.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version 1.0.2 | — | — |
amphp/amp Version v1.2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.