The MIT license, release notes, and Composer/Sonar tooling improve transparency. The project is about three months old and all 91 recent commits come from one maintainer, while no security policy is published.
68%
Total Score
50
100
94
75
The repository is owned by a user account rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.
One contributor made 100% of the 91 commits in the last three months, leaving no demonstrated second maintainer to provide continuity.
The repository recorded 91 commits in the last three months, indicating active development. However, the activity is concentrated in one maintainer, which limits independent continuity evidence.
The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but the recent release and commit activity provide stronger evidence of current maintenance.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear for a framework with many runtime dependencies.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.21 | — | — |
filp/whoops Version ^2.18 | — | — |
doctrine/orm Version ^2.17 | — | — |
doctrine/dbal Version ^3.7 | — | — |
predis/predis Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.