The package has a clear MIT license, release notes, repository tests, and a security policy. Its registry release history is stale, recent work is limited to one commit from one contributor, and all four workflow actions are unpinned.
67%
Total Score
67
100
94
83
The latest registry release was in January 2022, about 4 years and 8 months before collection, with no releases in the last 12 months. This is a meaningful maintenance concern despite the package having 14 releases overall.
One contributor made all commits in the last 3 months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.
Only one commit was recorded in the last 3 months, from one active maintainer. This recent activity is positive but too sparse to offset the long registry release gap.
Both workflows were analyzed successfully, use read-only permissions, and contain no audit findings or untrusted checkout paths. However, all 4 of 4 action references are unpinned, leaving avoidable update-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0|^3.0 | — | — |
bugsnag/bugsnag Version ^3.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.