psr/log

Healthy and suitable to depend on: it is a small, stable interface package with clear licensing, minimal runtime dependencies, and strong organizational backing. The main caveat is that no registry release has appeared in the last two years and recent repository commit activity is quiet, although the repository remains active and this release has GitHub release notes.

Latest 3.0.2

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 14 years with 12 releases, but it has had no registry release in the last two years. That is a maintenance concern, partly offset by the repository being pushed recently and this version having release notes.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which limits evidence of ongoing development. The recent push and the package's narrow, stable interface partly compensate for this gap.

Repo tooling

Composer is used as the build tool, showing standard project tooling, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than a severe risk for this small package.

Security policy

The repository has no SECURITY policy, leaving vulnerability-reporting expectations undocumented. This is a limited transparency gap, not evidence that the package is unsafe.