wmde/psr-log-test-doubles
The repository is backed by an organization, has tests, dependency scanning, a clear license, and no deprecation or archive status. Maintenance has recently slowed, and the workflow leaves all seven actions unpinned.
68%
Total Score
83
100
94
50
Health Score Breakdown
The package has existed since 2016 with eight releases, but it has had no release in the last 12 months and the latest release is from April 2025. This lowers confidence in active maintenance, though the long history provides some maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months. Although recent pull-request merges show some activity, the measured commit silence is a maintenance concern.
The repository has no security policy. For a small testing library this is a transparency gap, but it is not by itself evidence of abandonment or unsafe dependency behavior.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all seven action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Wikimedia Deutschland FUN Team |
| Jeroen De Dauw |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.