The package is small and straightforward to integrate. Documentation and licensing are adequate, but the long release pause and single-contributor maintenance make long-term support less certain.
65%
Total Score
50
100
88
75
The package and repository are owned by the same individual account, and no organization backing is shown. This aligns with the single-contributor evidence rather than compensating for it.
There have been no registry releases in the last 12 months, and the latest release was nearly two years ago. A repository push in July 2026 shows some activity but does not restore release freshness.
All recent commits come from a single contributor, leaving little demonstrated maintenance redundancy for a user-owned project.
The repository recorded one commit in the last three months from one active maintainer, showing current activity but only at a very low level.
Composer is used for builds, but no security scanning tooling is present. For this small package, the missing scanner is a modest transparency gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^6.0.0 || ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.