Wazi, le framework PHP où tout est clair : puissant, simple, et pensé pour comprendre ce qu'on construit.
64%
Total Score
caution
Active project with strong documentation, but same-day release history, one active contributor, and unpinned workflow actions add adoption risk.
The package is brand new at 0 days old, with all 6 releases published on the same day and no established release interval. This limits evidence of long-term maintenance stability.
One contributor made 100% of the 37 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is evidenced, leaving a real continuity concern.
Version 0.6.0 is not a stable major release, so the API may still change before 1.0. It is not marked as a prerelease, which provides some compensation.
Both workflows were analyzed successfully with no untrusted checkout, script injection, or auditor findings. However, all 3 action references are unpinned and one workflow grants top-level write permissions, creating workflow hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.