The README, tests, release notes, and Apache-2.0 licensing make the artifact straightforward to evaluate. Its small dependency set is clean, but no security policy is published.
52%
Total Score
50
100
83
75
This is the only recorded release, published in January 2023, with no releases in the last 12 months. The stable version and intact repository offset this somewhat, but the long silence raises abandonment risk.
The repository recorded no commits and no active maintainers during the last 3 months. That is a meaningful maintenance concern for a package whose latest release is already more than three years old.
The repository has 1 star, 0 forks, and 0 watchers, providing little evidence of an active user or contributor community. Low popularity alone is not disqualifying, but it offers no compensating maintenance signal here.
No security policy was found in the repository. This is a transparency gap, although it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version >= 1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.