Package Health

devtime-ltd/laravel-axiom-log

The repository is actively maintained and includes tests, documentation, dependency scanning, and a matching source project. Its young v0.9 release line, single active contributor, missing security policy, and unpinned workflow actions warrant care for a production dependency.

Latest v0.9.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Maintainerscaution

Only one account has registry publish access. The organization-owned repository provides project backing, but the registry publishing path remains concentrated.

Repo bus factorcaution

One contributor made 100% of the 9 commits in the last 3 months. Organization backing helps provide handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo issue activitycaution

There is one open issue and one open pull request, but no issues or pull requests were created or closed in the last month. This is limited activity rather than evidence of abandonment given the recent commits.

Security policycaution

The repository has no security policy. For a package that sends application logs and handles an API token, the missing disclosure and response guidance is a genuine transparency gap.

Version stabilitycaution

v0.9.0 is not a stable major release, so compatibility may still change before 1.0. It is not marked as a prerelease, which partly offsets the concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alun Davey

Direct Dependencies

DependencyLast ReleaseScore
monolog/monolog
Version ^3.0
—
—
illuminate/support
Version ^11.0|^12.0|^13.0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform