sympress/monolog-bundle
Clear documentation, tests, licensing, and a security policy make adoption straightforward. The observed contribution history is small, but organization backing reduces handoff risk. Workflow permissions and action pinning should be tightened.
78%
Total Score
83
86
88
Health Score Breakdown
The package is young at 102 days old with two releases, including a release about three months ago and a median interval of about 4 days. This shows initial activity but gives limited long-term maintenance evidence.
Only one commit from one active maintainer was observed over the last three months. The recent activity is positive, but the small sample limits confidence in sustained maintenance.
Composer build tooling is present, but no security scanning tool was detected. The separate security policy and workflow audit provide some compensating transparency, so this is not a major health concern.
Both workflows were analyzed without failed files or untrusted checkouts, and one uses read-only permissions. However, all four action references are unpinned and one workflow has top-level write permissions, creating a moderate workflow hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Brian Schäffner |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
sympress/kernel Version dev-main | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.