tarantool/client
The repository has organizational backing, a matching source tree, tests, release notes, and active quality tooling. Workflow references are unpinned, and the package has not published a release in over two years, so future compatibility deserves attention.
68%
Total Score
100
100
88
75
Health Score Breakdown
The package has 16 releases since March 2016, but none in the last 12 months and the latest release was over two years ago. This indicates slower delivery and raises maintenance risk, though the long release history provides some maturity evidence.
The repository has no dedicated security policy, which leaves vulnerability-reporting expectations less explicit. This is a transparency gap, but it is not by itself evidence that the package is unsafe.
The assessed version is a regular, non-prerelease release, although the package remains below major version 1. That combination is usable but provides less maturity assurance than a stable major-version line.
All three analyzed action references are unpinned, so workflow dependencies can change without a reviewed revision; this is a modest supply-chain hygiene concern. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-confidence findings, and the workflows do not use top-level write permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eugene Leonovich |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/uid Version ^5.1|^6|^7 | — | — |
rybakit/msgpack Version ^0.9 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.