A Slim framework skeleton for implementing REST-based Web services.
72%
Total Score
50
100
83
80
The post-create-project-cmd script is expected for a Composer project template, but it executes during project creation and should be reviewed for its exact behavior before use.
Two registry publishing accounts are listed, but one is named "Put your name here," which is weak publishing hygiene. Registry access does not establish active maintenance, so this is a minor transparency concern rather than evidence of maintenance capacity.
The package has a substantial README, but neither the artifact nor repository contains tests or a changelog. For an application starter template, the documentation is useful, but the absence of tests limits confidence in the scaffold's ongoing correctness.
The repository is owned by a GitHub user rather than an organization, so there is no organizational backing signal to compensate for the concentrated contributor base.
All recent commits come from one contributor, producing a 100% top-contributor share and a low short-term bus factor. The user-owned repository offers no organization-level handoff evidence to offset this concentration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version ^4.15 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
php-di/php-di Version ^7.1 | — | — |
monolog/monolog Version ^3.10 | — | — |
firebase/php-jwt Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.