Abstract logger TypeScript interface with a dummy logger that does nothing, useful for libraries.
78%
Total Score
63
100
94
80
The repository is owned by a user account rather than an organization, so the single-maintainer and concentrated-activity findings represent genuine continuity risk rather than normal organization-backed ownership.
All one recent commit came from a single contributor, giving the project a one-person bus factor. That creates continuity risk despite the repository being actively maintained and user-owned rather than organization-backed.
The repository recorded one commit in the last three months from one active maintainer. Recent work exists, but the low volume means maintenance capacity is thinner than the release history alone suggests.
The repository uses TypeScript, Vitest, tsup, and npm scripts for building and testing. It has no security scanning tools, which is a modest transparency and assurance gap for a dependency.
The repository has no security policy. For a small logger interface this is not a severe adoption blocker, but it leaves vulnerability-reporting expectations undocumented.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.