The package has a clear README, an MIT declaration, and no install-time scripts. Its 26 runtime dependencies and absent security policy increase upkeep and review work.
42%
Total Score
50
50
80
50
The latest release was about four years ago, with zero releases in the last 12 months. That is strong evidence of abandonment for a framework package, despite 31 historical releases.
The package declares 26 runtime dependencies, creating substantial compatibility and maintenance surface for a small framework with no recent releases.
Only one registry publishing account is listed. Because the source repository is owned by an individual rather than an organization, this provides limited publishing resilience.
The linked repository has no security policy or security-scanning tools reported, leaving vulnerability reporting and security oversight less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/uri Version ^6.4 | — | — |
filp/whoops Version ^2.12 | — | — |
adhocore/cli Version ^0.9.0 | — | — |
league/route Version ^5.0 | — | — |
clickfwd/yoyo Version ^0.8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.