The small codebase has no tests, changelog, security policy, or recent repository activity. Its linked repository does not match or mention the package, so verify the source before adopting it.
42%
Total Score
50
100
50
88
The package has had only two releases, with none in the last 12 months; its latest release was in December 2022, indicating a long period without maintenance evidence.
The repository name does not match the package name and its README does not mention the package, raising a concrete concern that the linked source may not belong to this release.
A README is present, but it is only 32 characters and the artifact has no tests or changelog. The missing tests and changelog are normal packaging practice; the minimal consumer documentation is a small gap.
The source repository is owned by an individual user rather than an organization, so there is no observed organizational backing to compensate for the limited maintenance evidence.
The repository has zero stars and forks and one watcher. This is supporting evidence of limited adoption, but popularity alone does not determine package health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^1.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.