Framework for tiny PHP applications
58%
Total Score
50
63
67
The latest release was in February 2024, with no releases in the following two years, despite seven releases during the package's first few months. This prolonged pause is a meaningful maintenance concern.
The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the package's limited activity and adoption signals.
The repository has 8 stars, 0 forks, and 1 watcher, indicating limited community validation and a thin external adoption base. Popularity is supporting evidence rather than a verdict by itself.
Composer build tooling is present, but no security-scanning tooling was detected. For a small framework this is a modest transparency and maintenance gap.
The linked repository is not archived, so the project remains administratively available. Its last push was in May 2024, however, which is consistent with the release-history maintenance concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.7 | — | — |
relay/relay Version ^2.1 | — | — |
cuyz/valinor Version ^1.9 | — | — |
php-di/php-di Version ^7.0 | — | — |
nikic/fast-route Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.