A pre configured handler for logz.io
62%
Total Score
caution
Usable with caveats: maintenance has gone quiet and workflow dependencies are unpinned.
The package has 10 releases since March 2022, but none in the last 12 months and the latest was December 2023, about 2 years and 9 months ago. This is a meaningful maintenance concern, partly offset by its established release history.
The repository recorded zero commits and zero active maintainers in the last 3 months. This indicates currently quiet development and raises the risk of delayed fixes.
The repository has no security policy. That is a transparency and vulnerability-reporting gap, though it is moderated by the presence of Dependabot scanning.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 6 of 6 action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^2.0 || ^3.0 | — | — |
webmozart/assert Version ^1.9 | — | — |
inpsyde/logzio-monolog Version ^2.0 | — | — |
oskarstark/trimmed-non-empty-string Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.