horde/log

Repo bus factorcaution

Two contributors were active recently, but one made five of six commits, so maintenance is somewhat concentrated despite organization backing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; the missing scanning coverage is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a logging library.

Workflow auditcaution

Both workflows were analyzed without failed files or audit findings, and neither grants top-level write permissions. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.