egeniq/monolog-gdpr
The package includes tests, a useful README, release notes, and a clear MIT license. Its small project has had no commits or releases for nearly four years, and it lacks a security policy.
60%
Total Score
50
90
67
Health Score Breakdown
The package has only two releases and no release in nearly four years, indicating a slow or inactive maintenance cycle. Its stable v2.0.0 release and documented release notes provide some maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This raises abandonment risk, although the package is small and stable.
The linked repository has no published security policy, reducing transparency about how vulnerabilities are reported and handled. This matters for a package intended to process potentially sensitive log data.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 monolog/monolog Version ^1.17|^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.