Cache-first, SEO-first, AI-native PHP application framework.
68%
Total Score
caution
A new package with one release and one recent commit has good documentation and organizational backing, but little maintenance history.
The package is only 62 days old and has one release, so there is little evidence yet of sustained maintenance or release reliability.
One contributor made all one recorded commit in the last three months, which is a thin observed contributor base; organizational ownership partly offsets the handoff risk.
Only one commit was recorded in the last three months, indicating very limited observed maintenance activity for a recently released framework.
The repository has zero stars, forks, and watchers; this is weak supporting evidence, but the package is only 62 days old and popularity is not decisive.
The only workflow was fully analyzed, uses read-only permissions, and has no detected dangerous findings, but both of its two action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^2.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.