rareloop/lumberjack-validation
The package includes tests, a license, and a repository that clearly matches its organization-backed project. Its small release history, no commits in the last three months, missing security policy, and unpinned workflow actions leave maintenance and build-hygiene concerns.
68%
Total Score
75
100
89
75
Health Score Breakdown
The package has five releases over about 7 years 8 months, with one release in the last 12 months, but the median gap between releases is about 1 year 11 months. This indicates a low maintenance cadence, partly offset by the recent release.
The repository had zero commits and zero active maintainers during the last three months. That is a meaningful short-term maintenance gap, despite the recent release and push.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance concern rather than a severe risk.
No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.
The single workflow was fully analyzed with no detected injection or high-confidence security findings. However, all three referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rakit/validation Version ^0.13.1 | — | — |
rareloop/lumberjack-core Version ^6.0.0||^7.0.0||^8.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.