Package Health

launchdarkly/server-sdk-otel

The project is organization-backed, licensed, documented, and has repository tests and release notes. It is only 143 days old, has one release, and recorded no commits in the last three months, limiting evidence of sustained maintenance.

Latest 0.1.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Name lookalikedanger

The package borrows the identity of launchdarkly/server-sdk, which has 86 stable releases and about 442,817 monthly downloads versus this package's single release and 71 downloads. Even with zero artifact overlap, this creates a substantial risk that consumers may select the wrong package.

Release historycaution

This package is 143 days old and has only one release, so there is little release history from which to judge long-term maintenance or stability.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed 2 months ago, the recent activity snapshot provides weak evidence of ongoing development.

Version stabilitycaution

Version 0.1.0 is an initial non-stable-major release, indicating an immature API and limited compatibility history.

Workflow auditcaution

All five workflows were analyzed with no reported findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, five of seven action references are unpinned and one workflow grants top-level write permissions, creating a modest reproducibility and permissions hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

LaunchDarkly <sdks@launchdarkly.com>

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.0|^2.0|^3.0
—
—
open-telemetry/api
Version ^1.0
—
—
launchdarkly/server-sdk
Version ^6.8
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform