open-telemetry/sem-conv

This release appears suitable for dependency use: it is a stable 1.x package with a multi-year history, a recent release, organizational backing, a matching repository, minimal runtime dependencies, and no deprecation or install-time lifecycle scripts. The main reservation is that the repository recorded no commits or active maintainers in the last 3 months, while only two releases occurred in the last 12 months; this may reflect generated semantic-convention output rather than abandonment, especially given the repository was pushed recently, but it limits evidence of ongoing maintenance. The absence of repository security scanning and a security policy are transparency gaps, though the repository has no workflows to expose token or workflow risks.

Latest 1.44.0

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for 1713 days with 36 releases and a median release interval of about 52 days. Only 2 releases occurred in the last 12 months, indicating slower recent cadence but not abandonment given the release history and latest release timing.

Repo commit activity

The repository shows 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern. However, the repository was pushed recently and the package is generated, so this is caution rather than a severe abandonment finding.

Repo issue activity

There were no new or closed issues or pull requests in the last month and no open pull requests. This is limited activity evidence, but the null open-issue count prevents stronger conclusions.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing security automation is a transparency gap, although the package has a small dependency surface.

Security policy

No repository security policy was found. This reduces disclosure transparency, though it is not by itself evidence that the package is unsafe to depend on.