The package has a clear MIT license, tests, and a focused 23-file codebase. Its seven runtime dependencies and lack of security scanning add maintenance exposure.
42%
Total Score
50
50
78
83
The latest release was about 6 years and 2 months ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and materially lowering confidence in ongoing maintenance.
Seven runtime dependencies create a moderately broad maintenance surface for a small logging package, with no declared development dependencies visible to support testing or maintenance.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these low engagement levels provide little evidence of community support.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a maintenance and transparency gap, though not severe by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
carno-php/env Version ^1.0 | — | — |
carno-php/net Version ^1.0 | — | — |
carno-php/timer Version ^1.0 | — | — |
carno-php/config Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.