The package has had no release or repository activity for about 11 years, and its latest version remains v0.0.3. It includes tests, a README, and a matching repository, but the license metadata conflicts with the BSD-3-Clause license file.
38%
Total Score
25
56
83
The last release was in January 2015, with no releases in the past 12 months. This long period without updates strongly raises abandonment risk for a dependency.
There were no commits and no active maintainers in the past three months, consistent with the repository's last activity about 11 years ago. This is the strongest evidence that maintenance has stopped.
A LICENSE file and repository license are present, which is positive, but the manifest declares the package proprietary while the detected text is BSD-3-Clause. That mismatch reduces transparency and should be resolved before adoption.
There were no recent issues or pull requests, so there is no current support activity visible. With no recent commits, the absence of issue traffic does not demonstrate active maintenance.
The repository has zero stars and forks and one watcher, offering little supporting evidence of community use or review. Popularity is not required for health, but this provides no compensation for the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.