ostrolucky/semantic-monolog-handler

Release historycaution

Only two releases exist, with no releases in the last 12 months; the latest was published about 15 months ago. This indicates limited ongoing maintenance for a package first released about 17 months ago.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. The non-archived repository provides some continuity, but not evidence of current maintenance.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community use or external review. Low popularity is supporting evidence rather than a standalone failure for a small utility.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less serious than evidence of unsafe release behavior.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted execution paths, but all 3 action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own but leaves dependency pinning as a hygiene concern.