Clear documentation, tests, changelog, licensing, and recent commits support adoption. The project is young with one active contributor, no security policy, and workflow pinning and permission hygiene need improvement.
68%
Total Score
75
50
88
50
The release has 23 runtime dependencies, including several related Oihana components and web-framework integrations. That breadth increases transitive maintenance surface, but is plausible for a controller library with the documented feature set.
post-install-cmd and post-update-cmd scripts run during installation or updates, adding operational and supply-chain exposure compared with a package without install-time behavior.
Only one registry account has publish access. The organization-backed repository provides some continuity, so this is a modest publishing-bus concern rather than a severe risk.
The package is only 90 days old with two releases, released about 65 days apart. This is limited evidence of long-term maintenance, though it does show an established second release.
One contributor made all 12 recent commits, concentrating practical maintenance knowledge. Organization ownership partly offsets handoff risk, but no second active contributor is shown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
slim/csrf Version ^1.5 | — | — |
slim/psr7 Version ^1.7 | — | — |
slim/slim Version ^4.14 | — | — |
twig/twig Version ^3.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.