38%
Total Score
unhealthy
Risky: the only release is from 2016 and the project has had no recent commits.
The package has one release, published over 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a framework dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but there is no observed recent maintenance.
Neither the package metadata nor the artifact or repository contains a recognized license. This creates a material adoption and redistribution concern.
The package has no README, tests, or changelog, although release notes exist for this version and document its initial framework release. The missing README still makes integrating this library harder.
The linked repository has no security policy. For an inactive framework with no recent maintenance, this leaves vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version @stable | — | — |
wixel/gump Version @stable | — | — |
stwessl/form Version dev-master | — | — |
codeguy/upload Version * | — | — |
phroute/phroute Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.