The MIT license, Composer build, repository tests, and readme provide a useful baseline for adoption. However, only two releases exist, none in the last 12 months, and repository activity has stopped; one maintainer and an unpinned container image add further maintenance and build-integrity concerns.
40%
Total Score
38
50
78
75
The package has only two releases, with the latest on May 20, 2024 and none in the last 12 months. This long release gap is a substantial abandonment concern for a framework.
There were zero commits and zero active maintainers in the last three months, matching the release gap and indicating that maintenance has effectively stopped.
Twenty-seven runtime dependencies make this framework relatively broad and increase the maintenance surface, though the profile itself does not show an unusual or clearly unsafe dependency pattern.
Only one registry publishing maintainer is listed, leaving little publishing redundancy for a framework project owned by an individual.
The repository is owned by an individual user rather than an organization, so the single registry maintainer does not have broader organizational backing to offset the thin maintainer base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version ^0.10.2 | — | — |
ramsey/uuid Version ^4.7 | — | — |
symfony/uid Version ^6.4 | — | — |
symfony/mime Version ^6.4 | — | — |
nesbot/carbon Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.