Package Health

amphp/sync

Clear documentation, repository tests, release notes, and security tooling support dependable use. CI references are unpinned, so build reproducibility is weaker than ideal.

Latest v2.3.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package has 18 releases over roughly 9 years, but none in the last two years; that slows confidence in ongoing maintenance without indicating abandonment by itself.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recent contributor is shown to offset the concentration.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months from 1 active maintainer, showing limited recent development activity.

Workflow auditcaution

The sole workflow was fully analyzed and has no dangerous triggers or audit findings, but all 4 action references are unpinned, weakening build reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aaron Piotrowski
Niklas Keller
Stephen Coakley

Direct Dependencies

DependencyLast ReleaseScore
amphp/amp
Version ^3
—
—
amphp/pipeline
Version ^1
—
—
revolt/event-loop
Version ^1 || ^0.2
—
—
amphp/serialization
Version ^1
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform