The project has almost no adoption and provides no security policy, which leaves little evidence of ongoing support. Its license, README, release notes, and lack of install scripts are positive, but they do not offset the long period without maintenance.
30%
Total Score
50
79
75
Only three releases were published, all clustered around July 2017, with none in the last nine years. The short historical release interval does not compensate for the prolonged absence of new releases.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in July 2017. This is strong evidence of abandonment risk.
There has been no new or closed issue or pull request activity in the last month, and one issue remains open. This reinforces the lack of active maintenance, although it is weaker evidence than the release and commit history.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little community evidence to compensate for the stalled maintenance.
The linked repository has no security policy. For a web framework, that is a meaningful transparency and vulnerability-reporting gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ^2.1 | — | — |
smarty/smarty Version ^3.1 | — | — |
symfony/config Version ^3.1 | — | — |
symfony/routing Version ^3.1 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.