Regular releases, a stable major version, tests, and a recent GitHub release support ongoing maintenance. A small contributor base, absent security policy, and unpinned workflow actions warrant routine review.
80%
Total Score
67
50
94
67
The package declares 29 runtime dependencies for a broad PHP framework covering GraphQL, authentication, databases, storage, and mail; this is substantial but consistent with its stated scope and is not by itself a health failure.
The repository is owned by a user account rather than an organization, so the concentrated contributor activity and single registry maintainer provide limited evidence of handoff capacity.
Two contributors were active, but the top contributor made 24 of 28 commits, or about 86%, leaving maintenance meaningfully concentrated.
The repository has 0 stars, 1 fork, and 1 watcher; this is weak supporting evidence, though popularity is not decisive for a small package with current activity.
The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for a framework handling authentication and authorization.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.7 | — | — |
league/event Version ^3.0 | — | — |
symfony/yaml Version ^7.4 | — | — |
symfony/cache Version ^7.4 | — | — |
sebastian/diff Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.