Package Health

malvik-lab/lumen-request-log-middleware

Risky to adopt: the package has had no release in over five years and no recent repository activity. It is small, clearly licensed, non-deprecated, and its repository matches the package, but the long inactivity makes abandonment a significant concern.

Latest 1.0.3PackagistPackagist

44%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historydanger

The package has four releases since March 2021, but its latest release was in May 2021 and it had no releases in the last 12 months. This long release gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release inactivity. No provided maintenance signal compensates for this lack of recent work.

Project backingcaution

The registry namespace and repository owner match, providing consistent ownership context. The owner is an individual account, so the single maintainer does not benefit from organization-backed capacity.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of a broad user or contributor community. Low popularity is supporting caution rather than a verdict by itself.

Repo toolingcaution

The repository uses Composer, which is appropriate for this PHP package, but it has no security scanning tools. For a small middleware package this is a modest transparency and maintenance gap, not an immediate dependency blocker.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vittorio Malaspina

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^8.0

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform