amattu2/event-logger

The repository does not mention the package, which makes ownership less clear, although its small file tree, README, and matching AGPL-3.0 license provide basic transparency. No install-time scripts reduce adoption risk, but the lack of tests, security scanning, and a security policy leaves limited assurance for future changes.

Latest v1.0.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published about 3.5 years ago, with no releases in the last 12 months. That strongly raises abandonment risk for a dependency whose maintenance needs may change over time.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that is no longer actively maintained.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package, so the repository's relationship to this release is not clearly established.

Repo tooling

Composer is used as the build tool, but no security scanning tooling is present. For this small library that is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a meaningful but secondary gap for a small library.