Fast and simple framework based on OpenSwoole/Slim
55%
Total Score
caution
Usable with caveats: the release workflow has high-confidence template injection and uses entirely unpinned actions.
The package declares 36 runtime dependencies, including several extensions and database-related components, which increases integration and transitive-maintenance burden for a framework package.
The artifact has no README, tests, or changelog, but repository tests are present and this source package uses GitHub releases. The missing artifact README is a minor consumer-documentation gap.
The repository recorded no commits and no active maintainers in the last three months, weakening evidence of ongoing maintenance after the latest release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a repository hygiene gap for a framework with many dependencies.
The repository has no published security policy, reducing transparency about vulnerability reporting and maintainer response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cycle/orm Version ^2.8 | — | — |
slim/slim Version ^4.14 | — | — |
nyholm/psr7 Version ^1.5 | — | — |
php-di/php-di Version ^7.0 | — | — |
symfony/cache Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.