moktech/mocklogger-sdk

The MIT license, clear README, and single runtime dependency make adoption straightforward. An install-time script and limited security process add maintenance friction.

Latest 1.0.92

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-install-cmd script, adding execution during installation. This is a maintenance and review concern, though the signal alone does not show harmful behavior.

Release history

The package has made only one release, on January 12, 2024, with no releases in the following 12 months. This provides little evidence of ongoing maintenance.

Repo commit activity

The repository recorded no commits and no active maintainers during the last three months, while its last push was on January 12, 2024. This indicates a prolonged lack of development activity.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. That leaves automated security coverage unclear.

Security policy

The repository has no security policy, so users have no documented process for reporting or receiving fixes for vulnerabilities. The small package scope partly limits the impact, but does not replace that transparency.