wondernetwork/slim-kernel

Dependency profilecaution

The package declares 17 runtime dependencies across Slim, Symfony, PHP-DI, and related components; this is a broad integration surface but appears consistent with the documented framework kernel role.

Repo commit activitycaution

There were no commits from any active maintainer in the last 3 months, which is a maintenance concern, although the strong recent release history provides partial compensation.

Security policycaution

No repository security policy was found, leaving vulnerability reporting expectations undocumented; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no audited dangerous findings. However, all 3 action references are unpinned, creating a modest reproducibility and workflow supply-chain hygiene gap.