Integration should be straightforward for a PHP library. However, this release is still a prerelease, all recent commits come from one contributor, and both workflow actions are unpinned. Readme, tests, licensing, and recent publishing provide useful counterweights.
68%
Total Score
75
92
100
One contributor made all 22 recent commits, leaving the project dependent on a single active maintainer and increasing continuity risk.
The assessed version is a prerelease, and every recent release is also a prerelease, so the API and behavior may still change before a stable release.
The workflow audit covered the only workflow successfully and found no dangerous triggers, sinks, or audit findings. However, both referenced actions are unpinned, so their versions can change without a repository commit.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.