Leaf PHP logger utility
82%
Total Score
83
100
94
80
All 6 recent commits came from one contributor, leaving maintenance highly concentrated. Organization backing provides some continuity, but the single active contributor remains a real resilience concern.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and preventative-maintenance gap, not evidence that the release is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations less explicit for users and contributors.
Neither workflow declares top-level token permissions. Although no write permissions were observed, explicitly restricting workflow tokens would provide stronger CI security hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
leafs/fs Version ^5.0 | — | — |
leafs/date Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.