The package has a clear README and a small, identifiable source tree. Its MIT manifest conflicts with the Apache-2.0 license file, and no security policy or scanning is present, increasing uncertainty for a framework with many runtime dependencies.
38%
Total Score
0
50
57
75
There has been only one release, published over 10 years ago, with no releases in the last 12 months. This is strong evidence that maintenance has stopped.
The repository had zero commits and zero active maintainers in the last three months, while its last push was over 10 years ago. This strongly supports the abandonment concern.
The framework declares 12 runtime dependencies and no development dependencies. A broad runtime dependency surface increases maintenance and compatibility risk for a package with no recent releases.
The manifest declares MIT, but the detected LICENSE file is Apache-2.0. The package is licensed, but the mismatch creates avoidable legal uncertainty.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of an active user or maintainer community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silex/silex Version ^1.3 | — | — |
symfony/yaml Version ~3 | — | — |
doctrine/dbal Version ^2.5 | — | — |
symfony/config Version ~3 | — | — |
illuminate/view Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.