Usable with caveats: the package is licensed, correctly linked to an active non-archived repository, and has a recent release, but maintenance and project hygiene are weak. Zero commits or issue activity in three months, 24 open issues, no tests, and no security scanning make long-term support uncertain.
54%
Total Score
38
50
78
90
The repository recorded zero commits and zero active maintainers in the last three months. Although the release history shows a release today, the collected activity still indicates very limited sustained development capacity.
The package declares 17 runtime dependencies and no development dependencies. That is a sizable dependency surface for a framework and the absence of development dependencies also fits with the repository's lack of tests, increasing maintenance risk.
Only one registry publishing account is listed. Because the repository is user-owned rather than organization-owned, this represents a genuinely thin publishing base, although it does not by itself prove that development is inactive.
A substantial README is present, but neither the artifact nor repository has tests or a changelog. For a PHP MVC framework, the lack of visible tests and release documentation is a meaningful maintenance and transparency gap.
The registry namespace and repository owner match, and the repository owner is a user account. This provides direct ownership alignment but no organizational backing to compensate for the single-maintainer profile.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
league/plates Version ^3.4 | — | — |
psr/container Version ^1.0 | — | — |
hexmakina/lezer Version 0.1.1 | — | — |
hexmakina/hopper Version 0.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.