Package Health

treehousetim/waffle

Waffle Application Framework For Lazy Engineers: a test-first starting point for PHP 8.5 + Slim 4 + Vue 3 web apps, with Docker Compose, Doppler secrets and a one-server GitHub Actions deploy.

Latest v0.1.0PackagistPackagist

62%

Total Score

caution

A brand-new package with one release and no recorded commit activity is not yet mature enough for a high-confidence dependency choice.

Health Score Breakdown

Dependency profilecaution

The package declares 12 runtime dependencies plus 2 development dependencies, including a substantial PHP web-application stack. This is reasonable for its framework role but creates a broad maintenance surface.

Lifecycle scriptscaution

The package runs a post-create-project-cmd lifecycle script, which is relevant for a project template and may be expected for setup, but it adds install-time execution that consumers should understand.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the single registry maintainer is consistent with the project backing but provides limited redundancy.

Release historycaution

This is the first and only release, published 0 days ago, so there is no release track record yet; the package's age explains the lack of history but does not remove the maturity gap.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months, leaving maintenance capacity unproven. Because the package was released 0 days ago, this is more a coverage and maturity concern than evidence of collapse.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tim Gallagher

Direct Dependencies

DependencyLast ReleaseScore
slim/psr7
Version ^1.8
—
—
slim/slim
Version ^4.15
—
—
php-di/php-di
Version ^7.1
—
—
delight-im/auth
Version ^9.0
—
—
robmorgan/phinx
Version ^0.16
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform