graylog2/gelf-php

Clear licensing, repository tests, and a small dependency footprint support adoption. Unpinned CI actions and no security policy leave avoidable maintenance and supply-chain hygiene gaps.

Latest 2.0.2

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has a long history with 35 releases, but it has made no release in about 20 months and none in the last 12 months. This indicates a meaningful maintenance slowdown despite its established history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is the strongest evidence of currently slowed maintenance.

Repo issue activity

There were no new or closed issues and no new or merged pull requests in the last month, alongside 9 open issues and 10 open pull requests. This suggests limited current responsiveness.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap for a library intended to handle log transport, though it is not by itself evidence of unsafe code.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 action references are unpinned, leaving avoidable reproducibility and action-substitution hygiene risk.