Package Health/pedrosoares/lumen-request-logger

pedrosoares/lumen-request-logger

The package includes a useful README and has no install-time scripts. Its small dependency set and matching source repository help, but the missing security policy leaves limited guidance for handling security issues.

Latest 2.0.2

Packagist

34%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in more than eight years: its latest release was March 2018, with zero releases in the last 12 months. This is strong evidence of abandonment for a library dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with a repository that has been inactive since March 2018. This materially raises abandonment risk.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. The build tooling is appropriate; the lack of scanning is a modest hygiene gap rather than a standalone severe risk.

Security policy

The linked repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is secondary to the long inactivity.

Version stability

The assessed version is 2.0.2, while the registry reports 1.2.0 as the latest version. That inconsistency makes the release metadata harder to trust and warrants caution.