Usable with caveats: the package is licensed, not deprecated or archived, and still had a recent release and repository push. However, it has no tests, no security policy, no recent commit activity, and the linked repository does not identify or mention this package.
58%
Total Score
50
100
67
83
One registry maintainer account is listed. The repository is owned by the same individual rather than an organization, so the narrow publishing base provides limited redundancy.
The artifact and repository contain a short README but no tests or changelog. GitHub Releases provide some release documentation, but the lack of tests still reduces maintainability transparency for a reusable interface package.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, offering less visible institutional backing.
The package has existed for about 5 years with 8 releases and one release in the last 12 months, showing it is not abandoned, though the release history is sparse.
There were zero commits and zero active maintainers during the last 3 months. The recent repository push and registry release show some activity, but current development capacity appears limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version 1.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.