42%
Total Score
33
50
72
83
This is the package's only release, published nearly three years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the lack of recent project activity.
The package declares ten runtime dependencies, including framework, ORM, logging, routing, and templating components. That is a meaningful dependency surface for a small skeleton, though not inherently excessive for its stated purpose.
Only one registry maintainer is listed. Because the linked repository is owned by the same individual, this reflects a genuinely thin support base rather than organizational publishing hygiene.
The registry namespace and repository owner match, and the repository is owned by a user rather than an organization. The matching ownership supports provenance but offers limited backing capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.4 | — | — |
tracy/tracy Version ^2.10 | — | — |
symfony/yaml Version ^6.2 | — | — |
geekmusclay/orm Version ^0.4.1 | — | — |
guzzlehttp/psr7 Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.