The repository has tests, a changelog, release notes, and an MIT license. Recent work is limited to two commits from one contributor, while the organization backing provides some continuity.
43%
Total Score
67
75
75
Packagist marks the entire package abandoned and names phalcon/bridge-psr3 as its replacement, making this release a poor choice for a new dependency.
The registry shows only two releases, with none in nearly four years; this weakens confidence in ongoing release maintenance despite recent repository activity.
All recent commits come from one contributor. Organization backing offers handoff potential, but no second active contributor is shown.
The repository has two commits in the last three months, showing some activity but not a strong maintenance cadence.
The workflow audit is complete and found no dangerous patterns, but all eight action references are unpinned, leaving avoidable build reproducibility risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.