The PHP Micro API Engine.
54%
Total Score
caution
Usable with caveats: the package has had no release since January 2020.
The package has only three releases and none in the last six years; its latest release was published in January 2020, which raises abandonment risk despite the repository remaining available.
There were no commits and no active maintainers in the last three months, indicating that practical maintenance has currently stalled even though the repository is not archived.
The package declares 16 runtime dependencies, creating a relatively broad dependency surface for a small framework and increasing maintenance exposure, though no dependency failure is shown here.
The project uses Composer, Make, and Robo, showing an established build process, but no security scanning tools were detected, leaving a security-maintenance gap.
The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities in a framework that handles APIs and sandboxing.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version ^3.0 | — | — |
twig/twig Version ^2.5 | — | — |
semsol/arc2 Version ~2.3.1 | — | — |
php-di/php-di Version ^6.0 | — | — |
jsonrpc/jsonrpc Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.