Package Health

open-telemetry/sampler-aws-xray

The repository is backed by an organization and the release includes a README, tests, and release notes. Its small release history and absent security policy leave less evidence than a mature project would provide.

Latest 0.3.0PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

Six runtime dependencies, including the AWS SDK and OpenTelemetry components, are appropriate for this sampler's role but create a moderate dependency surface.

Release historycaution

The package is 387 days old with only three releases and two releases in the last 12 months, indicating a modest but not abandoned release cadence.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, a meaningful maintenance warning; the recent release and repository push provide only partial compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
aws/aws-sdk-php
Version ^3.0
—
—
open-telemetry/api
Version ^1.1.0
—
—
open-telemetry/sdk
Version ^1.1.0
—
—
open-telemetry/sem-conv
Version ^1.32
—
—
open-telemetry/sdk-configuration
Version ^0.8.0
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform