The BSD-3-Clause license and organization-backed repository provide clear ownership and reuse terms. Maintenance is concentrated in one contributor, with no security policy; use Pop PHP Framework v7 through the kettle CLI for new applications.
18%
Total Score
67
63
50
The README and exact-version release notes explicitly mark the project as end of life and direct users to Pop PHP Framework v7, which outweighs the otherwise useful documentation.
The package has existed since 2015 with 18 releases, but only two releases in the last 12 months and a median interval of about eight months indicate a modest maintenance cadence.
All recent commit activity comes from one contributor, leaving maintenance dependent on a single person; organization backing provides some handoff capacity but no second active contributor is shown.
Only one commit was recorded in the last three months, showing limited recent development activity even though the repository was updated recently.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
popphp/popphp Version ^4.4.0 | — | — |
popphp/pop-http Version ^5.3.8 | — | — |
popphp/pop-view Version ^4.0.4 | — | — |
popphp/pop-kettle Version ^2.3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.