Regular releases, tests, and release notes provide useful maintenance context. The organization-backed project is current, but all nine recent commits came from one contributor and no security scanning tool was detected.
82%
Total Score
75
100
89
100
One contributor made all nine commits in the last three months, creating a concentrated maintenance path. Organization ownership provides some handoff capacity but does not remove the current concentration.
Nine commits landed in the last three months, showing recent activity, but only one maintainer was active during that period.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
Version 6.0.3 is a stable major release rather than a prerelease, although the recent prerelease share is high, which adds some release-channel uncertainty.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/csrf Version ^1.3 | — | — |
league/csv Version ^9.2.1 | — | — |
filp/whoops Version ^2.14 | — | — |
doctrine/dbal Version ^3.5 | — | — |
slim/twig-view Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.