Simple cli logger
58%
Total Score
50
100
85
75
Only one registry account has publish access, leaving limited visible publishing redundancy, though the linked repository is also owned by that individual.
The repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the thin maintainer base.
The package has 22 releases over about 12 years, but none in the last 12 months; the latest release was over a year ago, which indicates slowing maintenance.
There were no commits and no active maintainers in the last 3 months, consistent with the package's broader absence of releases for over a year and raising abandonment risk.
There were two open issues and four open pull requests, with no issues or pull requests newly opened or merged in the last month; this suggests limited current project responsiveness.
| Title | Versions | Severity |
|---|---|---|
CVE-2024-57075 eazy-logger is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 4.0.1. | 0.0.0 - 4.0.1 | High |
| Dependency | Last Release | Score |
|---|---|---|
chalk Version 4.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.