czproject/logger

Release historycaution

The package has only five releases since September 2017 and none in the last 12 months; the latest release was about 15 months ago. Its long median release interval partly explains the slow cadence, but does not remove the maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a small stable library this may reflect maturity, but combined with the 15-month release gap it raises abandonment risk.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous audit findings or untrusted checkouts, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.