A silex service provider that adds Manager to loader other service providers
35%
Total Score
unhealthy
Risky: releases and repository activity stopped nearly 11 years ago.
The latest release was published in December 2015, with no releases in the last 12 months. That nearly 11-year gap is strong evidence of abandonment despite the package not being formally deprecated.
The repository had no commits and no active maintainers in the last 3 months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
A post-autoload-dump script runs during Composer installation or autoload generation. Install-time execution adds some supply-chain and reproducibility exposure, although this signal does not show a dangerous command.
Only one registry account has publish access. That is a narrow publishing base for an independently owned project and increases continuity risk if that maintainer is unavailable.
The repository has zero stars, forks, and watchers, providing no external adoption or support signal. Popularity is only supporting evidence, so this reinforces rather than determines the abandonment concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silex/silex Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.