Package Health

kovenant/messenger-kafka

It includes a clear README, tests, MIT licensing, and automated dependency scanning. The workflow leaves its container image unpinned, while the project has no security policy or established community activity yet.

Latest v1.0.1PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Project backingcaution

The package is backed by a matching individual repository owner, so the short registry maintainer picture is not being compensated by organization backing; this remains limited evidence for a newly published project.

Release historycaution

The package was first released today and has only two releases, so there is not yet enough history to demonstrate sustained maintenance or release reliability.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months, but the repository and package were created today, making this a lack of track record rather than clear abandonment.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is supporting evidence only, but it means there is no demonstrated external adoption to offset the project's limited history.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a transport package that may handle production messaging infrastructure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.0.1|^2.0 |^3.0
—
—
symfony/config
Version ^6.4|^7.3|^8.0
—
—
psr/http-client
Version ^1.0
—
—
psr/http-factory
Version ^1.0
—
—
psr/http-message
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
3 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform