Package Health

mattiabasone/confluent-schema-registry-api

Documentation, tests, and release notes make integration clearer. Its one-release history, no commits in the last three months, and workflow hygiene leave meaningful maintenance and build-trust concerns.

Latest 9.0.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

This is the package's only release, published 227 days ago, so there is limited evidence of release maturity or sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance after the initial release.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tooling was detected, leaving a modest transparency and assurance gap.

Security policycaution

No security policy was found in the repository, reducing clarity about vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous trigger or script-injection findings, but all 13 action references are unpinned and high-confidence archived-uses and artipacked findings weaken build reproducibility and credential hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thomas Ploch
Mattia Basone

Direct Dependencies

DependencyLast ReleaseScore
apache/avro
Version dev-main#c499eefb48aa2db906c7bca14a047223806f36db
—
—
beberlei/assert
Version ~2.7|~3.0
—
—
guzzlehttp/psr7
Version ^2.4
—
—
guzzlehttp/guzzle
Version ^7.0
—
—
guzzlehttp/promises
Version ^2.0.0
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
8 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform