neeckeloo/monolog-module
The repository includes tests, release notes, and a clear MIT license, while its only workflow uses two unpinned actions. There is no security policy, and recorded commit activity is absent despite a recent repository push.
61%
Total Score
50
92
50
Health Score Breakdown
The latest registry release was nearly four years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, although the repository was pushed recently.
No commits or active maintainers were recorded in the last three months. Combined with the stale registry release history, this weakens evidence of ongoing maintenance.
The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response. No provided signal compensates for that documentation gap.
The workflow audit completed fully with no dangerous triggers, injection findings, or other reported findings. However, both analyzed action references are unpinned, leaving avoidable build-reproducibility risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nicolas Eeckeloo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 monolog/monolog Version ^2.0 || ^3.0 | — | — |
laminas/laminas-servicemanager Version ^3.3.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.