The repository has almost no community activity, and its operational dependencies make long-term maintenance harder to verify. Organization backing and a clear LGPL license help, but do not offset the stale release and absent engineering safeguards.
43%
Total Score
75
64
50
This is the package's only release, published about 6 years 10 months ago, with no releases in the last 12 months. That strongly raises abandonment and compatibility risk.
The artifact and repository contain no tests or changelog, and the package has no README. The GitHub release provides some release tracking, but the missing tests reduce confidence in maintenance quality.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although it was pushed in December 2023, current development activity is absent.
The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is not required for a healthy package, but this provides little supporting evidence of active community use.
Composer is used for builds, but no security-scanning tools are present. This leaves dependency and build-health checks less verifiable.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1.0 | — | — |
monolog/monolog Version ^1.24.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.