The package includes a clear README, source tree, and tests, with no install-time scripts or deprecation notice. Its maintenance appears effectively stopped, and the repository has no security policy or scanning tools, so this old framework release carries substantial adoption risk.
38%
Total Score
50
79
88
Only two releases were published, both in September 2019, with no releases in the last 12 months; this is strong evidence of an unmaintained package.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance-hygiene weakness rather than a standalone severe risk.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this adds a minor transparency concern alongside the much larger maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ^3.2 | — | — |
symfony/console Version ^4.0 | — | — |
nikic/fast-route Version ^1.3 | — | — |
symfony/event-dispatcher Version ^4.0 | — | — |
zendframework/zend-diactoros Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.