Package Health

hexmakina/log-laddy

Usable with caveats: the package is licensed, not deprecated or archived, and has recent releases, but it has no tests or changelog and recorded no repository commits in the last three months. Its pre-1.0 status, very small user base, and absent security policy make long-term maintenance less certain.

Latest 0.1.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Package scaffoldingcaution

The artifact and repository contain a README but neither contains tests or a changelog. For a small library, the lack of tests reduces confidence that changes are verified and the lack of release notes reduces transparency.

Project backingcaution

The package and repository are associated with the same individual account, providing identifiable ownership, but there is no organizational backing shown to broaden maintenance capacity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although the registry shows two releases in the last year, the lack of recent source activity is a meaningful maintenance concern.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is not decisive for a small package, but these counters provide little supporting evidence of community adoption or review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap, although it is not by itself evidence of an unsafe release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

HexMakina

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version 1.1.4
—
—
hexmakina/black-box
Version 0.1.*
—
—

Weekly Downloads

Info

Last Published
17 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform