mateusjunges/confluent-schema-registry-api
The package is documented and tested, with a recent release and a permissive license. Maintenance is concentrated in one recent contributor, while the workflow audit found checkout credentials retained for artifacts and all 13 action references unpinned.
62%
Total Score
50
88
83
Health Score Breakdown
The repository is owned by an individual account rather than an organization, so the single-contributor activity and two-person registry maintainer list provide limited continuity assurance.
The package has only 3 releases over about 3 years, but 2 arrived in the last 12 months and the latest release was recent. This indicates modest rather than abandoned maintenance.
All recent commits come from one contributor, creating continuity risk for a user-owned project with no organizational backing signal.
Only 1 commit from 1 active maintainer appears in the last 3 months. The recent release offsets abandonment concerns somewhat, but the observed maintenance cadence remains thin.
The repository uses Make and Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thomas Ploch |
| Mateus Junges |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 beberlei/assert Version ~2.7|~3.0 | — | — |
guzzlehttp/psr7 Version ^1.7|^2.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
flix-tech/avro-php Version ^5.0 | — | — |
guzzlehttp/promises Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.