Additional static layer for monolog lib
68%
Total Score
caution
Usable with caveats: maintenance has gone quiet, with no releases in the last year and no commits in three months.
The package has 24 releases over more than nine years, but none in the last 12 months; its latest release was about 16 months ago. This indicates slowing maintenance, though the release history is substantial.
The repository recorded no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but current maintenance activity is limited.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.
The repository has no security policy. For a maintained library this reduces clarity about vulnerability reporting and response, although it does not by itself make the release unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version 3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.