kearth/tea

The linked repository and package name align, and the artifact has a README and declared license. The release is nearly six years old, remains prerelease, has no commits in the past three months, and its PHP artifact differs sharply from the repository's Go-oriented tree; the license mismatch adds uncertainty.

Latest v1.0.0-alpha

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package file tree

The published artifact is a small PHP framework tree, while the linked repository tree is predominantly Go with Go modules and source files. This weakens confidence that the repository fully explains how this release was built.

Release history

This is the package's only release, published nearly six years ago, with no releases in the past 12 months. That leaves the assessed version materially stale for a dependency.

License

The manifest declares Apache-2.0, but the repository license file is detected as MIT. Although both provide licensing, the mismatch creates avoidable provenance and usage uncertainty.

Repo commit activity

The repository shows zero commits and zero active maintainers in the past three months. A recent push exists, but the lack of current commit activity still points to uncertain ongoing maintenance.

Repo issue activity

There are five open pull requests but no new or closed issues or merged pull requests in the past month. This suggests visible activity without demonstrated review or release follow-through.