a starter framework
46%
Total Score
unhealthy
Risky: no releases or commits for roughly three years, leaving strong maintenance and abandonment concerns.
The package has had no releases in the last 12 months, and its latest release was roughly three years ago. Seven total releases show some history, but the prolonged release gap raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance activity.
Only one registry maintainer is listed, so there is little visible publishing redundancy if that person becomes unavailable. The repository is user-owned rather than organization-backed, which provides no compensating team signal.
The package includes a changelog and a README, but the README is only 76 characters and explicitly leaves documentation as a TODO. The missing tests are normal packaging practice and are not treated as a gap.
Composer is used as a build tool, but no security scanning tools are configured. That weakens the project's maintenance and review hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ^2.14 | — | — |
morilog/jalali Version 3.* | — | — |
phroute/phroute Version ^2.1 | — | — |
firebase/php-jwt Version ^6.2 | — | — |
sallar/jdatetime Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.