pleonovich/log

Its Apache-2.0 license, minimal PHP dependency, and clear README make the small codebase easy to inspect. There is no security policy or automated security scanning, limiting evidence of ongoing oversight.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 8 years ago, with no releases in the last 12 months. That is strong evidence of an inactive project, although a small stable package can sometimes need few releases.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package having received no updates since November 2018. This materially increases abandonment risk.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of community adoption or external oversight. Low popularity alone is not disqualifying, but it reinforces the limited maintenance evidence.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest oversight gap rather than evidence of unsafe code.

Security policy

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package that writes application data to files.