Unfit to use: the package is marked abandoned and has had no release for nearly seven years. Its missing README also makes this framework harder to evaluate and adopt safely.
15%
Total Score
50
50
50
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe dependency-maintenance risk and outweighs the package's stable version status.
The package has 36 releases since April 2015, but none in the last 12 months; its latest release was in August 2019. The long period without a release indicates likely abandonment.
The package has five declared runtime dependencies, including its framework and theme-support components. This is a moderate dependency surface rather than an inherently unhealthy one, but the absence of recent releases means compatibility updates may not be available.
Only one registry account has publish access. This does not prove who actively maintains the project, but combined with the lack of recent releases it provides little evidence of ongoing maintenance capacity.
The published artifact has no README, which is a meaningful consumer-ergonomics and transparency gap for a framework intended to support WordPress themes. The absence of tests and a changelog in the artifact is normal packaging practice and is not a concern here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roots/sage-lib Version ~9.0.4 | — | — |
illuminate/support Version 5.6.* | — | — |
soberwp/controller Version ~2.1.0 | — | — |
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.