Usable with caveats, but maintenance appears stalled: the latest release and repository activity are from June 2022. It has a clear MIT license, tests, documentation, and a matching source repository, but its tiny community and missing security policy increase adoption risk.
55%
Total Score
33
50
78
80
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release gap and raising abandonment risk.
The package declares 12 runtime dependencies, including its framework components and PHP runtime; this is a meaningful dependency surface but not inherently excessive for a web application skeleton.
The repository is owned by an individual user rather than an organization, so there is no observed organizational backing to offset the small maintainer and community signals.
Although the package has 45 releases and previously released frequently, it has had no releases in the last 12 months and was last released in June 2022, indicating prolonged release inactivity.
There is one open issue and no issue or pull-request activity in the last month, providing no evidence of an active maintenance or support community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
chiron/sapi Version ^1.0 | — | — |
chiron/view Version ^1.0 | — | — |
nyholm/psr7 Version ^1.5 | — | — |
chiron/debug Version ^1.0 | — | — |
chiron/chiron Version ^3.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.