Usable with caveats: the package is established, licensed, tested, and backed by a matching organization repository, but recent maintenance is uneven. There were no commits in the last three months and only one release in the last year, despite recent merged pull requests and a current release.
70%
Total Score
75
92
83
The package has existed since 2017 with 156 releases, but only one release was published in the last 12 months, indicating a slower recent release cadence despite the current release being newly published.
The repository recorded zero commits and zero active maintainers over the last three months, which is a meaningful maintenance concern; recent pull-request merges and the current release provide some counterevidence but do not show sustained commit activity.
No repository security policy was found, leaving vulnerability-reporting expectations less transparent for a dependency used in applications.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
apache/thrift Version ^0.24.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.