async-aws/cloud-watch-logs

This is a healthy, actively maintained release with a substantial history since 2020, five releases in the last 12 months, a current stable version, an unarchived matching repository, and recent activity from two contributors under an organization-owned project. The package is licensed, has a coherent artifact and repository structure, includes tests in the repository, and avoids install-time scripts and dangerous workflow patterns. The main reservations are the absence of a repository security policy, no detected security-scanning tooling, and workflows without explicitly declared top-level token permissions; these are transparency and hardening gaps rather than evidence of abandonment. It is a reasonable dependency for developers who can accept those operational gaps.

Latest 2.10.1Packagist

Health Score Breakdown

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected. This is a hardening gap, though it is not by itself evidence of poor maintenance.

Security policycaution

No SECURITY.md or equivalent security policy was detected, which reduces vulnerability-reporting transparency for dependents.

Token permissionscaution

Both workflows lack top-level token permission declarations. No workflow requests top-level write permissions, but explicit least-privilege declarations would provide stronger CI hardening.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
async-aws/core Version ^1.9	—	—