The package is licensed, has a matching source repository, and includes release notes and a repository changelog. Its small audience, absent security policy, and limited project activity leave substantial maintenance risk.
42%
Total Score
67
50
67
75
Only one release exists, published in May 2017, with no releases in the last 12 months; this is strong evidence of abandonment risk for a dependency.
The repository is not archived, but its last push was in September 2017, which reinforces the release-history evidence of prolonged inactivity.
The package has 10 runtime dependencies, including several PHP extensions and framework components, creating a meaningful compatibility and maintenance surface.
One registry publishing account is listed, but the organization-backed repository provides some context; this is still a thin publishing base.
There are no open issues or pull requests and no recent issue or pull-request activity, so there is no visible recent community maintenance signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version 3.8.1 | — | — |
catfan/medoo Version v1.2.1 | — | — |
slim/twig-view Version 2.2.0 | — | — |
alexgarrett/violin Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.