The package has a usable README, a declared Apache 2 license, and no install-time scripts. Its source has seen no commits for about 13 years, with no recent releases and almost no repository adoption, making abandonment a serious concern.
32%
Total Score
25
67
83
The latest release was in April 2013, and there have been no releases in roughly 13 years. This is strong evidence that the package is abandoned for a dependency that may need compatibility or security updates.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped about 13 years ago.
The package and repository are owned by the same individual account, providing consistent ownership context but no organizational backing or broader maintenance capacity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful community cushion for the inactive project.
The repository uses Composer, which is appropriate for this package, but it has no security-scanning tooling. That is a transparency and maintenance gap, especially alongside the absence of recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silex/silex Version 1.0.*@dev | — | — |
facebook/php-sdk Version 3.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.