The single-person publishing setup and absent security policy leave limited visible oversight. Clear licensing, tests, documentation, and a small dependency surface help, but not enough to offset the age and inactivity.
35%
Total Score
25
100
72
83
The package has had no release in more than 11 years, despite 22 releases historically; this strongly indicates the release line is no longer maintained.
There were 0 commits and 0 active maintainers in the last 3 months, consistent with a project that is no longer receiving maintenance.
Only one registry publishing maintainer is listed, which limits visible publishing redundancy; the repository's observed inactivity makes this more concerning.
The linked repository has 0 stars and 0 forks and only 1 watcher, providing little evidence of an active supporting community; popularity is supporting evidence rather than decisive on its own.
Composer build tooling is present, but no security scanning tool was detected, leaving a transparency and maintenance-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.