fond-of-oryx/log-log-io-connector

Release historycaution

The package has had only two releases, with the latest published in January 2023 and none in over three years. The active, non-archived repository partly compensates, but the registry history still indicates stalled maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. The January 2025 push shows some older activity, but the recent inactivity raises abandonment risk.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens disclosure transparency, although it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three referenced actions are unpinned, leaving a supply-chain hygiene gap.