The package has clear licensing, release notes, source tests, and organizational backing. Its recent repository activity is quiet, and the workflows need stronger dependency pinning and tighter publishing hygiene.
68%
Total Score
67
100
100
75
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent 5.1.0 release.
There are only four open issues, but no new or closed issues and no merged pull requests in the last month, consistent with limited recent project activity.
The repository has no security policy, leaving vulnerability reporting and response expectations less transparent for a package that integrates with application error reporting.
All 7 analyzed action references are unpinned, and one workflow has top-level write permissions; the audit also found a high-confidence low-severity ad hoc package installation. These are workflow hygiene concerns, not severe risks on their own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^2.10|^3.8 | — | — |
illuminate/console Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
sixlive/dotenv-editor Version ^1.1|^2.0 | — | — |
honeybadger-io/honeybadger-php Version >=2.24.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.