The MIT license, complete README, matching repository, and recent release notes improve transparency. Zero commits and active maintainers in the last 3 months, one registry maintainer, and no security tooling leave meaningful maintenance risk.
68%
Total Score
33
50
93
50
There were zero commits and zero active maintainers in the last 3 months, indicating that maintenance activity has currently stopped despite the recent release.
Seven runtime dependencies, including a PHP version constraint and established framework, database, logging, caching, and environment components, make the package operationally dependent on several upstream projects.
The post-create-project-cmd script runs during project creation; this is expected for a Composer project template but adds install-time behavior that consumers should understand.
Only one account has registry publish access. The repository is user-owned, so there is no organization backing shown to compensate for this thin publishing base.
The registry namespace and repository owner match, but both are a single user account rather than an organization, providing limited evidence of institutional backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
catfan/medoo Version ^2.1 | — | — |
flightphp/core Version ^3.0 | — | — |
flightphp/cache Version ^1.1 | — | — |
monolog/monolog Version ^3.0 | — | — |
vlucas/phpdotenv Version ^5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.