It has a clear MIT license, thorough README, repository tests, and dependency-review scanning. Its GitHub Actions use seven unpinned references, and no security policy is present.
58%
Total Score
25
100
94
67
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. Existing tests and a documented release do not compensate for the lack of recent activity.
The package and repository are owned by the same individual account, so the source relationship is clear. Individual ownership offers less demonstrated maintenance capacity than organization backing, but the activity signal is the stronger concern.
The package has only three releases, with the latest on November 9, 2024 and none in the following 12 months. This indicates materially reduced maintenance activity, though the release is stable rather than experimental.
No repository security policy was found. This is a modest transparency gap for a package that handles application log data, but it does not independently make the release unfit.
All three workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^8.0|^9.0|^10.0|^11.0 | — | — |
opcodesio/mail-parser Version ^0.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.