Send log messages from PHP workers to the RoadRunner app logger plugin over RPC
72%
Total Score
caution
Sparse release cadence, no recent commit activity, and all workflow actions are unpinned temper otherwise solid project backing.
The package has existed for about 3 years and 11 months, but only four releases with roughly eight months between releases indicate a relatively slow release cadence. The new current release partly offsets that concern.
The repository reports zero commits and zero active maintainers in the last three months, which is a maintenance concern. The same-day release push and 12 merged pull requests in the last month provide partial compensating evidence, but do not fully remove the gap.
All six workflows were analyzed without failed files or high-confidence findings, and no untrusted checkout or script-injection paths were found. However, all 10 action references are unpinned and one workflow grants top-level write access, creating a workflow hygiene caution without an observed dangerous sink.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spiral/roadrunner Version ^3.0 | — | — |
roadrunner/api-dto Version ^2.1 | — | — |
roadrunner/goridge Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.