It has a clear MIT license, tests, release notes, and a matching non-archived repository. Its 19 runtime dependencies and five unpinned workflow actions add modest maintenance and build-reproducibility concerns.
43%
Total Score
50
50
67
100
The package has had no release in about 2 years 9 months, with zero releases in the last 12 months; its earlier 20-release history does not offset the current inactivity.
There were zero commits and zero active maintainers in the last 3 months, reinforcing the broader evidence that development has stopped.
The package declares 19 runtime dependencies, creating a relatively broad maintenance surface for a pre-production framework.
The artifact includes a substantial README and tests, and this exact version has GitHub release notes. The README explicitly describes the software as pre-production, which is a material adoption concern despite the documentation positives.
Version v0.6.1 is not a stable major release, which fits the project's early-stage status and increases compatibility risk for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.5 | — | — |
php-di/php-di Version ^7.0 | — | — |
psr/container Version 2.0.2 | — | — |
gettext/gettext Version ^5.6 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.