mimmi20/monolog-factory

The package has a clear MIT license, useful documentation, repository tests, and a recent release history. Those positives do not offset the archived repository, package-level deprecation, no commits in three months, and fully unpinned workflow actions.

Latest 5.0.4

Packagist

18%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe adoption risk even though the release itself is not separately withdrawn.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Together with the archived status, this supports a substantial abandonment concern.

Repository archived

The linked repository is archived, which strongly indicates the project is no longer intended for active maintenance. A recent push does not compensate for the repository's archived state.

Workflow audit

All 30 analyzed action references are unpinned, creating avoidable workflow supply-chain exposure; four workflows also grant top-level write permissions. The audit found no untrusted checkout or script-injection paths, which limits the severity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thomas Müller

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0.2	—	—
psr/container Version ^1.1.2 \|\| ^2.0.2	—	—
monolog/monolog Version ^3.10.0	—	—
laminas/laminas-servicemanager Version ^4.5.0	—	—