questwork/logger

Release historydanger

The package has only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the absence of registry deprecation.

Licensecaution

The manifest declares “Questwork,” but no recognized license was detected and no license file exists in the package or repository. That leaves the legal terms for adoption unclear.

Package scaffoldingcaution

A README is present, but it contains only 30 characters and provides little consumer guidance. The absence of packaged tests and a changelog is normal for published artifacts and is not a concern by itself.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked source repository is specifically maintained for this package.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tooling is present. For this small, inactive project that is a minor transparency gap rather than a decisive risk.