Package Health/edgetelemetrics/eventcorrelation

edgetelemetrics/eventcorrelation

This is a mature and actively released package with 68 releases over more than six years, 13 releases in the last 12 months, a recent push, substantial repository tests, clear licensing, and no registry deprecation or install-time lifecycle scripts. The main concern is concentrated maintenance: all 26 commits in the last three months came from one contributor, and the repository has very limited popularity and no security policy. Overall, the evidence supports depending on it, but teams should recognize the single-maintainer continuity risk and the package's non-stable-major versioning.

Latest v0.15.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a continuity concern, although registry access alone does not establish actual maintenance capacity and the repository activity is assessed separately.

Project backing

The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to offset the concentrated contributor base.

Repo bus factor

One contributor made 100% of the 26 commits in the last three months, creating a genuine single-maintainer continuity and handoff risk.

Repo popularity

The repository has only 3 stars, 2 forks, and 1 watcher, so external adoption and review appear limited. Low popularity is supporting caution rather than a decisive health failure.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

James Lucas

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.0\|^2.0\|^3.0	—	—
psr/clock Version ^1.0	—	—
react/promise Version ^3.3.0	—	—
clue/zlib-react Version ^1.2	—	—
react/event-loop Version ^1.3.0	—	—