The MIT license is present and the dependency surface is small. The repository is lightly supported, with no tests, security policy, or recent release activity.
28%
Total Score
50
100
56
75
Packagist marks the entire package as abandoned and names tp5er/think-http-logger as its replacement. Package-level deprecation is a severe adoption risk even though it does not by itself indicate maliciousness.
The package has only two releases, with no release in about 3 years and 8 months and none in the last 12 months. This indicates a maturely inactive release line rather than ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. The repository is not archived, but the lack of recent activity reinforces the abandonment concern.
The repository name matches the package, but its README does not mention the package name. This weakens confidence that the linked repository clearly documents the published package.
The repository has 2 stars, 2 forks, and no watchers. This is limited supporting evidence of adoption, but popularity alone does not determine package health.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.