It has a license, tests, README, and release notes, with no install-time scripts. Low adoption and no security policy add smaller transparency concerns.
38%
Total Score
79
75
The package has only one release, published in November 2015, with no releases in the last 12 months. This long period without a new release is strong evidence of abandonment risk.
The repository has only 3 stars and no forks, providing little evidence of broad adoption or a community that could sustain the project. Popularity is supporting evidence, so this reinforces rather than determines the abandonment concern.
The repository has no security policy or security-scanning tooling. For an old web framework, this is a transparency and maintenance gap, although it is less serious than the absence of ongoing releases.
The latest version remains v0.1, indicating an early-stage release that was never advanced to a stable major version. The GitHub release notes provide some documentation but do not offset the age and lack of progression.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version ^3.0@RC | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.