Core application / extension loader for Tiny PHP Web
62%
Total Score
caution
Usable with caveats: maintenance is lightly demonstrated by one recent commit from one contributor.
Only one registry account has publish access. This is a mild publishing concentration concern, partly offset by the organization-owned repository.
The package is young, with 16 releases since May 5 and several same-day releases; this shows active initial publishing but gives limited evidence of long-term maturity.
All recent commits came from one contributor. The organization owner offers some ability to hand maintenance off, but no second active contributor is evidenced.
The repository recorded only one commit in the last three months from one active maintainer, which provides weak evidence of continuing maintenance.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bolt-php/database Version >=1.0.0 | — | — |
bolt-php/contracts Version >=1.1.0 | — | — |
bolt-php/validation Version >=1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.