It includes tests, a declared MIT license, and no install-time scripts. The single maintainer, absent security tooling, and long-stalled release history leave compatibility and support uncertain.
42%
Total Score
50
50
67
83
The latest release was over 13 years ago, with no releases in the last 12 months; this is strong evidence of abandonment despite the package having three historical releases.
No commits and no active maintainers were recorded in the last three months, leaving no evidence of ongoing development despite the repository's recent push timestamp.
Five runtime dependencies and two development dependencies form a moderate dependency surface for this framework, creating some update and compatibility burden without being excessive.
Only one registry account has publishing access, which is a support risk; the matching organization-owned repository partly compensates for this thin registry maintainer base.
The package includes tests, which is a small positive for maintainability. Its empty README and lack of a changelog are weaker consumer documentation, but the missing changelog is normal packaging practice.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sugiphp/cache Version dev-master | — | — |
sugiphp/config Version dev-master | — | — |
sugiphp/events Version dev-master | — | — |
sugiphp/database Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.