difra/lib-logger

Release historydanger

This is the package's only release, published nearly four years and seven months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance, although a small stable library can remain unchanged after a complete release.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no updates since February 2022. This is a substantial abandonment concern despite the repository not being archived.

Package scaffoldingcaution

The published artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The implementation is very small, so the missing tests and changelog are moderate concerns, while the absent README reduces integration transparency.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported. For a small library this is a hygiene gap rather than a severe supply-chain risk.

Security policycaution

The linked repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is not evidence of malicious behavior.