The project has a clear license, tests, release notes, organization backing, and a matching repository. Maintenance has recently gone quiet, this is a beta release behind the current stable major, and all seven workflow actions are unpinned; lifecycle scripts also deserve care for a project template.
62%
Total Score
67
81
50
The project defines pre-install, post-install, post-update, and post-create-project commands. These are relevant to a project skeleton and are not inherently unhealthy, but they increase installation complexity and deserve review.
The package has 196 releases since September 2019 and released twice in the last 12 months, showing substantial history but a currently slower cadence than its 3.4-day median interval.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful sign of currently quiet maintenance, despite the broader release history.
There were no new or closed issues or pull requests in the last month, and no open items. This is consistent with a quiet project, although the absence of backlog is mildly positive.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. For a PHP project template, the missing security scanner is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bolt/core Version ^5.0 | — | — |
bolt/assets Version ^5.0 | — | — |
bolt/themes Version ^3.3 | — | — |
bolt/article Version ^1.0 | — | — |
symfony/flex Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.