The repository includes tests, a clear MIT license, and no install-time scripts. Its small dependency ecosystem and lack of security tooling add maintenance risk, while the project’s long inactivity remains the main concern.
38%
Total Score
50
50
69
75
The latest release was published in October 2018, and there have been no releases in the past 12 months. This long period of release inactivity is a strong abandonment and compatibility concern.
There were no commits and no active maintainers in the past three months, consistent with the repository’s last push in October 2018. This is strong evidence that maintenance has stopped.
The package declares 11 runtime dependencies, including several framework, authentication, database, and tooling components. This creates a relatively broad compatibility and maintenance surface for a small, inactive project.
The repository has 2 stars, 0 forks, and 1 watcher. Low popularity is only supporting evidence, but combined with the absence of recent activity it provides little evidence of an active user or contributor community.
Composer is used for builds, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a hygiene concern rather than evidence of a defect by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version ^3.0 | — | — |
league/plates Version ^3.3 | — | — |
monolog/monolog Version ^1.23 | — | — |
symfony/console Version ^4.1 | — | — |
vlucas/phpdotenv Version ^2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.