The package is small and has organization-backed ownership, a stable version, and no install-time scripts. Its lack of security scanning and security-policy documentation leaves maintenance practices less transparent.
52%
Total Score
50
100
83
75
The repository recorded zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped for more than four years.
The package has 12 releases but none in the last four years, with the latest published in July 2022. This is a meaningful maintenance concern, although an established release history provides some maturity evidence.
There were no new or merged issues or pull requests in the last month. With no open work either, this is consistent with a dormant project rather than active maintenance.
The repository has no stars or forks and only 21 watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of community adoption.
Composer build tooling is present, but no security scanning tools are configured. This is a transparency and maintenance-process gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
silex/silex Version >=1.3 | — | — |
statflo/php-di Version >=1.2 <2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.