This is a generally healthy and actively maintained release: it has a stable major version, five releases in the last 12 months, a recent repository push, substantial repository tests and documentation, a license, no deprecation or archive status, and no install-time lifecycle scripts. The main concerns are that all 38 recent commits came from one maintainer, the repository has no security policy, and its GitHub Actions workflow does not declare top-level token permissions; these are meaningful resilience and security-hygiene gaps, though they do not outweigh the evidence of active maintenance and a coherent source repository. The package is reasonable to depend on, with normal single-maintainer project risk.
78%
Total Score
63
100
89
80
The repository is owned by an individual user rather than an organization, so there is no organizational maintenance cushion to offset the concentrated contributor base.
One contributor made all 38 commits in the last 3 months, creating a substantial single-maintainer continuity risk for an independently owned project.
There are no open issues or pull requests, and no recent issue or pull-request activity. This is not inherently unhealthy, but it provides little evidence of community review or maintenance beyond the commit history.
The repository has only 8 stars, 2 forks, and 1 watcher. Low popularity is supporting context rather than a health verdict, but it provides limited independent evidence of broad community adoption.
Composer build tooling is present, but no security-scanning tools were detected. The build setup is appropriate, while security automation remains a hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version >=1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.