elastic/ecs-logging
A clear license, tests, release notes, and security tooling improve transparency. Recent repository work is healthy, but most workflow actions are not pinned, leaving a supply-chain hygiene gap.
82%
Total Score
100
94
83
Health Score Breakdown
The package has existed for about 7 years and released once in the last 12 months, with the latest release recent; the relatively sparse cadence is a modest maintenance concern rather than evidence of abandonment.
All 8 workflows were analyzed without audit findings or untrusted checkouts, but 15 of 16 action references are unpinned; that weakens build reproducibility and update integrity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Philip Krauss |
| Sergey Kleyman |
| Pawel Filipczak |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1|^2|^3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.