The project has clear documentation, repository tests, a matching source repository, and an MIT license. Its only two releases arrived within hours, followed by 169 days without recorded commits, while workflows use broad permissions and inherit secrets.
61%
Total Score
50
100
88
50
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful abandonment concern for a package this young.
The package is young at 169 days and has only two releases, both published within hours of each other, so its long-term maintenance record is still limited.
There is only one open issue and no issues or pull requests were opened or closed in the last month, providing little evidence of active project interaction.
The linked repository is active rather than archived, but its last recorded push was 169 days ago, limiting the positive maintenance evidence.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.