slimkit/plus

Risky to adopt for new projects: the package is mature and transparently backed, but it has had no release in nearly six years and no recent repository activity. Its large dependency surface and install-time scripts add operational risk to an already stagnant project.

Latest 2.4.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 61 releases since May 2017, but the latest was November 2020 and there were no releases in the last 12 months. This long release gap is a substantial abandonment concern despite the historically regular cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the three months before collection. Combined with the stale release history, this indicates a serious lack of ongoing maintenance.

Dependency profile

The package declares 39 runtime dependencies, including a framework, payment, messaging, storage, and several modular packages. This broad dependency surface increases maintenance and compatibility exposure, especially for an unmaintained release.

Lifecycle scripts

Composer install-time scripts run post-autoload-dump, post-create-project-cmd, and post-root-package-install. These scripts are normal for an application framework package but increase what installation executes and therefore deserve review.

Repo issue activity

There were 107 open issues and no new or closed issues, pull requests, or merges in the last month. The unresolved backlog and inactivity reinforce the abandonment concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
medz/cors Version ^1.5	—	—
laravel/ui Version ^3.0	—	—
jpush/jpush Version ^3.6	—	—
symfony/yaml Version ^5.1	—	—
doctrine/dbal Version ^2.12	—	—