phpro/mage2-module-logger-handler

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, increasing the work performed automatically during dependency changes. No other provided signal shows those scripts are unsafe, so this is a review concern rather than a severe risk.

Release historycaution

Only four releases have been published since June 2020, with no releases in the last 12 months and a median interval of about 21 months. This indicates slow maintenance, though the latest release is recent enough to show the project is not abandoned.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern for a dependency, despite the recent 5.0.0 release.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or injection findings, but both action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own but leaves the unpinned actions as a hygiene gap.