The source repository includes tests, a changelog, and a matching project, while the license is clear. Workflow references are all unpinned and the repository has no security scanning, so maintenance hygiene is weaker.
68%
Total Score
67
100
88
67
The package has 17 releases over roughly 10 years, but none in the last 12 months; the repository was pushed more recently, which partly offsets the stalled registry cadence.
There were no commits and no active maintainers in the last three months, a meaningful sign of currently weak maintenance activity despite the more recent repository push.
Seven issues and three pull requests remain open, while no issues or pull requests were closed or merged in the last month; this suggests limited recent issue handling.
Composer is used for builds, but no security scanning tools are configured, leaving a repository hygiene gap.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.