PHP's yii2 uses monolog as log component
42%
Total Score
unhealthy
No release or commit activity since October 2023, with no tests or security policy and only one registry maintainer.
The package has made no releases in about three years, despite being available since October 2023. This is strong evidence of abandonment risk for a dependency.
There were no commits and no active maintainers in the last three months. Combined with the last push in October 2023, this indicates sustained inactivity rather than a brief lull.
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this indicates limited publishing redundancy and increases continuity risk.
The registry namespace and repository owner match, and the owner is a user account. This supports repository identity but provides no organizational backing to compensate for the single-maintainer structure.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these values provide little evidence of a broader user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.