The MIT license, matching repository, and focused scaffold make its contents easy to inspect. But it has had no release or commit activity since August 2017, and no security policy or security scanning supports ongoing maintenance.
32%
Total Score
25
78
75
This is the package's only release, published in August 2017, with no releases in the last 12 months. That strongly suggests the project is abandoned rather than actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since August 2017.
The repository is owned by an individual user rather than an organization. This is not inherently unhealthy, but it provides less visible backing to offset the lack of recent activity.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence only, but these counts provide no community signal to offset the long inactivity.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling is present. The missing scanner modestly reduces confidence in ongoing maintenance practices.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version ^3.8 | — | — |
slim/twig-view Version ^2.2 | — | — |
vlucas/phpdotenv Version ^2.4 | — | — |
symfony/var-dumper Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.