Usable with caveats: it has a long release history, frequent recent releases, a stable version, clear repository backing, tests, and a security policy. Recent repository commits are absent and the project has very little community activity, so maintenance continuity depends heavily on one publisher.
70%
Total Score
63
100
89
90
Only one registry publishing account is listed, creating concentration risk, although the matching repository owner and strong release history provide some compensation.
The repository recorded zero commits and zero active maintainers during the last 3 months, which is the main maintenance concern and could indicate a pause after the latest release.
There are no open issues and one pull request was opened in the last month, but it was not merged; this shows limited current community activity without indicating severe abandonment.
The repository has only 5 stars, 1 fork, and 1 watcher, limiting evidence of broad review or community support; this is a supporting concern rather than proof that a small package is unhealthy.
Composer build tooling is present, but no security scanning tools were detected, leaving less automated evidence for identifying vulnerable changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
slim/http Version ^1.3 | — | — |
slim/psr7 Version ^1.6 | — | — |
slim/slim Version ^4.11 | — | — |
latte/latte Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.