Documentation, tests, and a clear MIT license support adoption. The organization-backed repository matches the package and contains a substantial source tree, but its workflow references are unpinned.
58%
Total Score
67
100
83
50
Fifteen releases were published in a short period ending 507 days ago, with no releases in the last 12 months. This suggests the project may have stopped evolving after its initial launch.
The repository recorded no commits and no active maintainers in the last three months. Combined with the older last push, this is a meaningful maintenance concern.
There are no open issues or pull requests and no recent issue or pull-request activity. With no recent commits, this is consistent with a quiet project but does not prove abandonment on its own.
The repository has no stars or forks and one watcher. This offers little external validation, but popularity is supporting evidence rather than a health verdict.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
slim/slim Version ^4.0 | — | — |
twig/twig Version ^3.0 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.