This release is usable but carries meaningful maturity and maintenance uncertainty. It is licensed, non-deprecated, linked to a matching repository, has a stable version, and has no install-time lifecycle scripts or dangerous workflows. However, the package is effectively brand new, with only two releases published within hours, no observed commits or active maintainers over the prior three months, no tests or changelog, no security scanning or security policy, and a relatively substantial runtime dependency surface. The repository was updated today, so the lack of historical activity may partly reflect its age, but there is not yet enough evidence of sustained maintenance to rate it as healthy for an important dependency.
58%
Total Score
67
50
78
80
The package declares 20 runtime dependencies, including several PHP extensions and application libraries. This broad dependency surface increases transitive maintenance and compatibility exposure for a package whose own artifact is minimal.
The artifact and repository each contain only four files: .gitignore, LICENSE, README.md, and composer.json. This is consistent with a lightweight meta-package, but leaves little implementation, test, or documentation evidence to assess.
A README documents the intended meta-project usage and development tools, but neither the artifact nor repository contains tests or a changelog. For a configuration and dependency-sharing meta-package, missing packaged tests is less significant, but the absence of both tests and release documentation still limits maturity evidence.
The repository is owned by an individual user rather than an organization. Individual ownership is valid, but it provides less visible backing and bus-factor assurance than organization ownership, especially for a package with no demonstrated activity history.
Only two releases exist, both published within roughly one hour, and the package age is zero days. This is too little history to demonstrate sustained maintenance or release discipline.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aura/sql Version ^5.0 | — | — |
aidphp/http Version dev-master | — | — |
ramsey/uuid Version ^4.9 | — | — |
aura/sqlquery Version ^3.0 | — | — |
slim/php-view Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.