Risky to adopt for new projects: the latest release and repository activity are from December 2020, with no releases or commits in nearly six years. It has a matching repository, a usable README, and no deprecation or install scripts, but the long abandonment gap is a substantial maintenance liability.
43%
Total Score
50
100
78
50
The package has had no release in nearly six years despite being established for over six years, and there were no releases in the last 12 months. This strongly suggests the integration is no longer actively maintained.
There were zero commits and zero active maintainers in the last three months, consistent with the nearly six-year gap since the last release. This is the main maintenance and abandonment risk.
The repository has only 2 stars and 1 fork, providing little evidence of a broad support community. Low popularity alone is not disqualifying, but it offers little compensation for the inactivity.
The repository uses Composer, but no security scanning tools were detected. This is a transparency and maintenance gap, though the small package and lack of workflows limit its practical severity.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters more because the project also shows no recent maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^6.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.