Documentation is present, and the release includes notes plus a modest dependency set. The archived repository and roughly three years without commits make future fixes and support unlikely; avoid this release for production.
18%
Total Score
0
100
69
50
The package has only three releases, all published within about 10 minutes on October 27, 2022, and none in the last 12 months. This indicates a release line that has effectively stopped.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment risk shown by its archived status.
The linked repository is archived, and its last push was on October 1, 2023. An archived source project is unlikely to receive fixes or support.
No build tooling or security-scanning tooling was detected. This weakens verification and maintenance hygiene, although it is less significant than the repository's archived state.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is an additional transparency gap for a framework intended for application development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ^2.14 | — | — |
catfan/medoo Version ^2.1 | — | — |
smarty/smarty Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.