Its 0.x status and 47 runtime dependencies leave more compatibility and maintenance surface than a mature framework. The source could not be verified, so ongoing ownership and build provenance remain unclear.
27%
Total Score
50
38
The package explicitly borrows the identity of laravel/framework, while declaring neither a self-described fork nor a distinct relationship; the established lookalike has far more downloads and stable releases. Consumers could select this package unintentionally.
The package has made no release in the last 12 months, despite 17 releases being concentrated in its first month; its latest release is about 18 months old. That pattern strongly suggests abandonment or stalled maintenance.
The framework declares 47 runtime dependencies, including many closely related framework components, creating a broad compatibility and maintenance surface. No provided signal shows that this complexity is actively managed.
The current release is not a prerelease, but the 0.1 major version indicates the framework has not reached a stable major release and may still carry compatibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/memory Version ~3.1.0 | — | — |
hyperf/signal Version ~3.1.0 | — | — |
hyperf/process Version ~3.1.0 | — | — |
league/flysystem Version ^3.25.1 | — | — |
guzzlehttp/guzzle Version ^7.8.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.