anktx/kafka-client

This release appears healthy and reasonable to depend on: it has a strong recent release cadence, an active non-archived repository, matching source ownership, substantial documentation, a changelog, repository tests, and a clear BSD-3-Clause license. The package has no deprecation notice, no install-time lifecycle scripts, and its GitHub workflow shows no analyzed dangerous patterns. The main reservations are the very small visible community footprint, absence of security scanning and a security policy, and workflow token permissions that are not explicitly constrained; these are transparency and defense-in-depth gaps rather than evidence of abandonment. Confidence is good but not maximal because several maintenance and provenance signals were not collected.

Latest 0.14.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
psr/clock Version ^1.0	—	—