threls/activity-log
It is clearly licensed, has repository tests, and includes release notes for this version. The small audience and absent security policy provide less supporting evidence for long-term reliance.
70%
Total Score
75
100
89
67
Health Score Breakdown
The repository recorded no commits and no active maintainers in the last three months. The recent release and push partly compensate, but the current maintenance pause is a meaningful concern.
The repository has zero stars, one fork, and one watcher, indicating very limited adoption evidence. Popularity is only supporting evidence, so this lowers confidence more than it determines the verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving less automated protection against regressions or dependency issues.
The repository has no security policy, so users have no documented vulnerability-reporting process. This is a transparency gap, though it is not evidence of a security flaw by itself.
Both workflows were analyzed without audit findings or untrusted triggers, but all six action references are unpinned and one workflow grants top-level write permissions. These are workflow-hygiene concerns without a demonstrated untrusted sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sabina |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jenssegers/agent Version ^2.6 | — | — |
illuminate/contracts Version ^10.0||^11.0||^12.0||^13.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.