Zim Logger is a simple log FW with 5 levels of verbosity
55%
Total Score
caution
Usable with caveats: no release or commit activity for over two years, plus no declared or detected license.
No registry license is declared, and neither the package nor the collected repository contains a detectable license file. This leaves the legal terms for using the library unclear.
The package has 7 releases since January 2021, but none in the last 12 months; its latest release was in July 2024, over two years before collection. This indicates a slowing or inactive release cycle.
The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing ongoing maintenance.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. For a small library this lowers transparency but is not independently severe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpstan/phpstan Version ^1.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.