44%
Total Score
unhealthy
Risky: one release, no commits for over a year, and no license leave maintenance and reuse unclear.
Neither the registry metadata, package artifact, nor linked repository identifies a license or includes a license file. This creates a material adoption and reuse risk.
This is the package's only release, published about 18 months ago, with no releases in the last 12 months. That gives little evidence of ongoing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, while its last push was about 17 months ago. The absence of recent development outweighs the repository being unarchived.
Only one registry account has publishing access. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The package and repository contain no README, tests, or changelog. Missing tests and changelog are not expected in the published artifact, but the absence of a consumer-facing README is a transparency gap for this framework-style package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.0 | — | — |
filp/whoops Version ^2.17 | — | — |
league/route Version ^6.2 | — | — |
league/container Version ^4.2 | — | — |
laminas/laminas-diactoros Version ^3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.