The package includes tests, a clear README, and a permissive license. Recent work is limited to two commits from one contributor, with no security policy and undeclared workflow permissions.
68%
Total Score
50
100
94
80
All two recent commits came from one contributor, leaving maintenance capacity concentrated in a single person.
Only two commits were recorded in the last three months, so maintenance is present but limited.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and monitoring gap.
The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.
Both analyzed workflows lack top-level token permissions declarations; neither grants top-level write access, but the permissions are not explicitly constrained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.