The package has no repository tests or security scanning, and its 15 runtime dependencies increase maintenance overhead. The MIT license, matching repository, and organization backing provide useful transparency, but not enough to offset the weak maintenance evidence.
42%
Total Score
50
50
64
50
The latest release was more than two years ago, with no releases in the last 12 months; nine releases in the initial month do not demonstrate ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
Fifteen runtime dependencies, including framework, routing, logging, and error-handling components, create substantial maintenance and compatibility overhead for a small package.
The package includes a README and has a GitHub release for this version, but neither the artifact nor repository has tests or a changelog. Missing tests are a meaningful quality gap for a framework package.
The repository has zero stars and forks and only one watcher, providing little independent evidence of adoption or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/log Version ^2.0 | — | — |
filp/whoops Version ^2.15 | — | — |
amphp/parallel Version ^2.2 | — | — |
monolog/monolog Version ^3.5 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.