This the next big thing in the php frameworks community
55%
Total Score
33
50
78
67
There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has currently stalled.
The framework declares eight runtime dependencies, including authentication- and payment-related components, creating a relatively broad dependency surface that increases maintenance exposure.
Only one registry account has publish access. This is not decisive by itself, but it leaves limited visible publishing redundancy when combined with absent recent activity.
The registry namespace and repository owner are different accounts, and the repository owner is identified as an individual user rather than an organization. This provides limited visible institutional backing.
The package has 10 releases, but none in the last 12 months; its latest release was about 19 months ago. This indicates materially slowed maintenance for a framework dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gabela/tasks Version ^1.2 | — | — |
monolog/monolog Version ^3.5 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
gabela/gabela-users Version ^1.0 | — | — |
phpmailer/phpmailer Version ^6.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.