The project has tests, an MIT license, an exact GitHub release, and organization backing. Maintenance has stopped since May 2025, with no commits or releases in the last 12 months, and no security policy is published.
62%
Total Score
83
50
88
67
The package declares 17 runtime dependencies, including framework, database, LDAP, HTTP, and DI components; this is a substantial integration surface that raises update and compatibility burden, but is consistent with an authentication framework package.
The package has 13 releases over about four years, but it has had no release in the last 12 months and the latest release was in May 2025, indicating stalled maintenance.
There were no commits and no active maintainers in the last three months, reinforcing the evidence that development has stopped.
Composer build tooling is present, but no security-scanning tools are configured, leaving a modest transparency and maintenance gap.
The repository has no published security policy, so vulnerability reporting and response expectations are unclear for an authentication package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/http Version ^1.1 | — | — |
slim/slim Version ^4.2 | — | — |
jasny/auth Version ^2.2 | — | — |
php-di/php-di Version ^7.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.