Skeleton app for the karhu PHP microframework
70%
Total Score
caution
Usable with caveats: a very young project has four recent commits from one maintainer.
The package is only 43 days old with two releases, both published within minutes on the same day. This shows active initial publication but provides little evidence of a sustained maintenance pattern.
One contributor made all four recent commits, leaving maintenance dependent on a single person with no demonstrated handoff capacity.
The repository had four commits in the last three months, showing some recent activity, but that is a small record for a package this young.
The repository has no SECURITY.md policy. This is a transparency gap for reporting vulnerabilities, though it does not by itself show unsafe code or abandonment.
Version v0.1.1 is not marked as a prerelease, but the 0.1 version indicates an early API that may change before 1.0.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bjornbasar/karhu Version ^0.1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.