Pack Bootstrap for Pith
62%
Total Score
caution
No releases in the last 12 months and no commits in 3 months make this a thin, slowly maintained dependency.
Seven runtime requirements include PHP extensions and two Pith packages, with no development dependencies. The dependency surface is moderate and includes several environment requirements that may affect integration.
The registry namespace and repository owner both use pith-front, but the owner is an individual account rather than an organization. This provides consistent ownership but limited backing evidence.
Only 2 releases exist over about 958 days, with no releases in the last 12 months and a median interval of about 407 days; this indicates slow maintenance for a package serving bundled frontend assets.
There were 0 commits and 0 active maintainers in the last 3 months, which is the clearest abandonment concern, though the repository was pushed alongside the latest release in April 2025.
Composer is used as the build tool, but no security-scanning tools are configured. The missing scanning is a modest transparency and maintenance gap for a package distributing bundled assets.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pith/base Version >=0.2.0 | — | — |
pith/workflow-elements Version >=0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.