withaspark/log-aggregator

Release historydanger

The package has only two releases, both in August 2019, and none in roughly seven years. This is strong evidence of abandonment risk for a dependency, with no newer release activity to compensate.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap. This materially lowers confidence in future fixes or support.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. This is a modest hygiene gap and does not outweigh the stronger maintenance concerns.

Security policycaution

The repository has no security policy. For a small utility this is a secondary transparency gap, but it adds uncertainty about how future vulnerabilities would be reported.