fusio/adapter-cassandra
The package has a clear README, tests, matching license, and organizational backing. Its old release line and weak workflow pinning leave too much maintenance and build-integrity risk for a new dependency.
43%
Total Score
75
75
67
Health Score Breakdown
The last registry release was about seven years ago, with no releases in the last 12 months. That strongly raises abandonment and compatibility risk despite the package having eight historical releases.
There were no commits or active maintainers in the last three months. This leaves current maintenance capacity unclear and does not offset the long gap since the last package release.
The linked repository has no security policy. This is a transparency and maintenance gap, although it is less severe than the stale release cadence.
The latest version is a non-prerelease 0.5.1, which is more usable than an explicitly experimental prerelease but still indicates an unfinished major-version line.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but it uses an unpinned container image with high confidence. That weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christoph Kappestein |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 fusio/engine Version ^3.0 | — | — |
datastax/php-driver Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.