Documentation, tests, release notes, and licensing are in place, with no install scripts or deprecation. Security scanning is absent and the workflow uses four unpinned actions, so ongoing maintenance deserves attention.
65%
Total Score
67
78
83
The package is only 42 days old and has two releases, both published on the same day. This is too little history to establish long-term maintenance reliability.
All six recent commits came from one contributor. Although the repository is organization-owned, the observed activity still shows a concentrated maintenance path.
Six commits were made in the last three months by one active maintainer, showing recent work but limited evidence of sustained maintenance capacity.
The repository has only 2 stars and no forks or watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little external validation.
The repository uses Composer and Make, but no security scanning tools were detected. This is a modest transparency and maintenance gap for a dependency project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version ^3.1 | — | — |
thesis/etcd-api Version ^0.1.4 | — | — |
thesis/time-span Version ^0.2.3 | — | — |
thesis/grpc-client Version ^0.2 | — | — |
thesis/grpc-protocol Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.