Waffle Application Framework For Lazy Engineers: a test-first starting point for PHP 8.5 + Slim 4 + Vue 3 web apps, with Docker Compose, Doppler secrets and a one-server GitHub Actions deploy.
62%
Total Score
caution
A brand-new package with one release and no recorded commit activity is not yet mature enough for a high-confidence dependency choice.
The package declares 12 runtime dependencies plus 2 development dependencies, including a substantial PHP web-application stack. This is reasonable for its framework role but creates a broad maintenance surface.
The package runs a post-create-project-cmd lifecycle script, which is relevant for a project template and may be expected for setup, but it adds install-time execution that consumers should understand.
The package and repository are owned by the same individual account rather than an organization, so the single registry maintainer is consistent with the project backing but provides limited redundancy.
This is the first and only release, published 0 days ago, so there is no release track record yet; the package's age explains the lack of history but does not remove the maturity gap.
No commits or active maintainers were recorded in the last 3 months, leaving maintenance capacity unproven. Because the package was released 0 days ago, this is more a coverage and maturity concern than evidence of collapse.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/psr7 Version ^1.8 | — | — |
slim/slim Version ^4.15 | — | — |
php-di/php-di Version ^7.1 | — | — |
delight-im/auth Version ^9.0 | — | — |
robmorgan/phinx Version ^0.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.