The project has one registry maintainer, no security policy or scanning, and a large runtime dependency set. Its license, tests, README, matching repository, and stable release history provide useful support.
62%
Total Score
50
50
86
67
The package declares 12 runtime dependencies, creating meaningful coupling and increasing the maintenance surface for this application-oriented boilerplate.
A post-update lifecycle script runs during dependency updates, adding execution surface that should be understood before adoption.
Only one registry account can publish releases, leaving a thin publishing base; the linked user-owned project provides some direct ownership context but not redundancy.
The package is about 20 months old with 25 releases, but only one release appeared in the last 12 months, indicating a materially slower release cadence.
There were no commits and no active maintainers in the last three months, which is the clearest evidence of currently slowed maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
julio101290/auth Version ^1.0 | — | — |
phpcfdi/sat-catalogos Version ^0.3.1 | — | — |
codeigniter4/framework Version ^4.1 | — | — |
julio101290/boilerplate Version ^1.0 | — | — |
codeigniter4/translations Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.