A shared logging utility class for lighthouse and friends.
78%
Total Score
100
89
50
The package has existed since 2017 with 11 releases, but it has had no registry release in the last 12 months. Active repository commits partly compensate for the slow release cadence.
The linked repository name does not match `lighthouse-logger`, and its README does not mention the package, so the source relationship is not clearly established.
The audit covered all seven workflows with no untrusted checkouts or script injection, but 39 of 48 action uses are unpinned. High-severity cache-poisoning findings were low-confidence, while high-confidence adhoc package installation is a smaller hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
debug Version ^4.4.1 | — | — |
marky Version ^1.2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.