The package includes a substantial README, a clear file layout, and no install-time scripts. Its repository is still unarchived and correctly tied to the package, but the lack of recent maintenance and security scanning weakens confidence for a new dependency.
55%
Total Score
50
50
83
88
Six runtime dependencies, including database, filesystem, templating, and mail components, make this skeleton relatively broad and increase maintenance exposure, though the profile is understandable for its stated application role.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is limited visible institutional backing.
The package has 43 releases and a history since 2016, but it has had no releases in the last 12 months; the latest release was in February 2021, indicating prolonged inactivity.
There were zero commits and zero active maintainers in the last three months, supporting the conclusion that active development has largely stopped.
Two issues and two pull requests remain open, with no issues or pull requests created or merged in the last month; this is consistent with a quiet project and adds a modest maintenance concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/plates Version 3.4.* | — | — |
league/flysystem Version 2.0.* | — | — |
illuminate/database Version 8.27.* | — | — |
jupitern/slim3-core Version 1.2.* | — | — |
phpmailer/phpmailer Version 6.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.