The core framework that handles the logic of the website.
8%
Total Score
critical
Unfit to use: the package is deprecated and has had no release since August 2017.
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe barrier to taking a new dependency.
The latest release was published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a framework package.
The package declares ten runtime dependencies, creating a broad dependency surface for an old framework release. No provided signal shows that this complexity is actively maintained.
Version 0.5.2 remains below a stable major version, so compatibility guarantees are limited. The long period without releases makes this concern more significant.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version ^5.4 | — | — |
psr/container Version ^1.0 | — | — |
vlucas/valitron Version ^1.4 | — | — |
psr/simple-cache Version ^1.0 | — | — |
mistic100/php-hooks Version ^0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.