dlundgren/slim-turbo
A single maintainer and no commits in the last three months leave limited evidence of ongoing support. The release is well documented, tested, licensed, and has no install scripts or workflow audit findings.
70%
Total Score
50
93
67
Health Score Breakdown
Only one registry account has publishing access. That is a thin operational base for release continuity, although the linked repository shows the package has an identifiable owner.
The package has 14 releases since 2019, but only one release in the last 12 months; the latest was about 12 months ago. This points to slowing maintenance, despite a substantial release history.
There were no commits and no active maintainers in the last three months. Combined with only one release in the last year, this is meaningful evidence of limited current maintenance.
No security policy is present in the repository. That is a transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe or abandoned on its own.
The single workflow was fully analyzed with no audit findings and no untrusted triggers or checkout sinks. However, all three action references are unpinned, leaving a modest workflow supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Lundgren |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 slim/slim Version ^4.4 | — | — |
psr/simple-cache Version ^2 | ^3 | — | — |
middlewares/utils Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.