58%
Total Score
83
100
75
100
Only two releases exist, with the latest nearly two years ago and none in the last 12 months. This materially raises abandonment and stale-dependency risk.
The repository recorded no commits and no active maintainers in the last three months, indicating currently inactive development despite a more recent recorded push date.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanner is a modest hygiene gap, not evidence of unsafe code.
v0.3.10 is not a prerelease, but the package remains below 1.0, so consumers should expect greater API-change risk than with a stable-major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0 || ^3.0 | — | — |
sonsofphp/logger-contract Version 0.3.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.