enthusiast/worker-template
This is a usable but relatively immature package with strong recent publishing activity, a stable release line, an active unarchived repository, and no install-time scripts. However, the package has no license file or declaration, no tests or changelog, a single registry maintainer, no security scanning or security policy, and a very small repository with no visible community activity; the unusually short median release interval also warrants caution about release discipline. Dependence may be reasonable if the package fits your needs and you can review its source, but it lacks several transparency and assurance signals expected of a mature dependency.
63%
Total Score
50
50
72
90
Health Score Breakdown
The package declares nine runtime dependencies, including several PHP extensions and telemetry, Kafka, Redis, and framework components; this is a relatively broad integration surface that can increase compatibility and operational maintenance burden.
Neither a declared license nor a license file was found, leaving the legal terms for reuse unclear; this is a genuine transparency concern.
Only one account has registry publish access. That is a concentration risk, although this administrative signal does not by itself establish poor maintenance activity.
The artifact includes a substantive README, but it has no tests and no changelog, and the repository also has no tests or changelog. For a worker and instrumentation library, the lack of executable regression coverage is a meaningful maintenance and compatibility gap.
The source repository is owned by an individual user rather than an organization, so there is no visible organizational backing or redundancy to offset the single-maintainer concentration.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Konstantin Popov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2.0 || ^3.0 | — | — |
enqueue/rdkafka Version ^0.10.27 | — | — |
open-telemetry/api Version ^1.0 | — | — |
open-telemetry/sdk Version ^1.14 | — | — |
yiisoft/yii-console Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.