Usable with caveats: the package has a long release history, regular recent releases, tests, a changelog, and active repository infrastructure. Adoption carries maintenance risk because the repository recorded no commits or active maintainers in the last three months, while popularity and security-policy coverage are limited.
66%
Total Score
50
89
75
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance concern, although the recent registry releases and recent repository push show that the project has not clearly been abandoned.
The repository has 1 star, 0 forks, and 0 watchers, indicating a very small public user and contributor base. Low popularity is supporting evidence rather than a severe problem, but it provides little external resilience if the maintainers stop work.
The repository has no published security policy. That weakens vulnerability-reporting transparency for a framework intended for interactive websites, though it does not by itself indicate abandonment.
Five workflows declare read-only permissions, but one workflow has top-level write permissions. This is a limited automation-hardening concern rather than a severe risk because no dangerous workflow pattern was detected.
Version v0.5.3.1 is not a stable-major release, so its 0.x status implies a greater risk of breaking changes than a mature 1.x package. It is not marked as a prerelease, which partly offsets that concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
latte/latte Version >=2.10.8 <3.1 | — | — |
nette/utils Version ^2.4.8 || ^3.2.2 || ^4.0.5 | — | — |
tracy/tracy Version ^2.9.8 || ^2.10.9 || ^2.11.0 | — | — |
symfony/yaml Version ^4 || ^5 || ^6 || ^7 || ^8 | — | — |
godsdev/tools Version ^0.3.8 || ^0.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.