Clear documentation, repository tests, and release notes make integration easier. Broad workflow permissions and the reusable-workflow credential finding deserve operational review before adoption.
68%
Total Score
80
50
88
88
Seven runtime dependencies, including Laravel, Monolog, AWS SDK, and phpnexus/cwh, create a meaningful compatibility surface for a logging integration. The profile is plausible for the package's function but increases upgrade coordination needs.
Only one registry account has publishing access, which limits release redundancy. The organization-owned repository and recent project activity partly compensate for this registry-level concentration.
The package is young, with only two releases over 89 days and a median interval of about 33 days. This is limited evidence of long-term maintenance, though the recent release activity is not dormant.
One contributor made all 12 commits in the past three months, creating a concentrated maintenance dependency. Organization backing provides some handoff capacity, but no second active contributor is shown.
Composer build tooling is present, but no security-scanning tool was detected. The repository does provide a SECURITY.md policy, which partly offsets the tooling gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
phpnexus/cwh Version ^3.0 | — | — |
illuminate/log Version ^12.0 || ^13.0 | — | — |
aws/aws-sdk-php Version ^3.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.