Tests, a clear README, and an MIT declaration make the project easier to evaluate. Its single-user backing and absence of security scanning leave little evidence of recovery if maintenance stops.
44%
Total Score
25
78
50
The latest release was published in December 2022, and there have been no releases in the last three years and nine months. Fourteen releases show some initial activity, but the long gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity. The repository is not archived, but that does not compensate for the absent recent work.
Only one registry account has publishing access, leaving a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no provided organizational capacity to offset that concentration.
The repository has one star and no forks, providing little evidence of broad adoption or a community that could help sustain it. Low popularity is supporting evidence rather than a verdict by itself.
Composer is used as the build tool, but no security-scanning tools are present. The build setup is established, while the missing scanning reduces maintenance and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
middlewares/whoops Version ^2.0 | — | — |
doctrine/migrations Version ^3.5 | — | — |
gravatalonga/king-foundation Version >=1.0.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.