Its single maintainer and 11 runtime dependencies leave little visible maintenance capacity. The registry does not mark it deprecated, but the repository could not be found, limiting verification.
28%
Total Score
50
50
50
The package has only two releases, with the latest published about 8 years ago and none in the past 12 months. That prolonged inactivity is a strong abandonment concern.
The package declares 11 runtime dependencies and no development dependencies. This creates a broad runtime maintenance surface, though the signal does not show those dependencies are themselves unhealthy.
Only one registry account has publish access, leaving a thin visible maintainer base and increasing continuity risk if that person becomes inactive.
The registry reports latest_version 1.0.0 while the assessed release is 2.0.0; although the recorded version is stable and not a prerelease, the mismatch reduces release transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/slim Version ^3.0 | — | — |
filp/whoops Version ^2.1 | — | — |
symfony/yaml Version ^3.3 | — | — |
vlucas/phpdotenv Version ^2.4 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.