initphp/logger

Release historycaution

The package has existed for about four and a half years but has only three releases, with one release in the last 12 months and a median interval of about two years. This indicates slow maintenance, though not abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That recent inactivity lowers confidence in ongoing maintenance, even though a newer release and recent push are present elsewhere in the evidence.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. The security policy and otherwise transparent repository reduce the impact of this tooling gap.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all 7 action references are unpinned, weakening build reproducibility and supply-chain hygiene.