akeb/framework

Project backingcaution

The repository is owned by a personal GitHub account rather than an organization, and the registry has one maintainer. This suggests a thin project backing structure and increases continuity risk if that maintainer becomes unavailable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. With the last push on May 18, 2026, this indicates a recent maintenance gap despite the package's frequent release history.

Repo toolingcaution

The repository uses Composer but has no detected security-scanning tooling. For a framework handling authentication, permissions, and integrations, that leaves a meaningful transparency and maintenance gap.

Security policycaution

No SECURITY.md or equivalent security policy was found. This weakens vulnerability-reporting transparency for a framework that includes authentication and authorization features.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection findings. However, all 3 action references are unpinned and the high-confidence audit found a container using the floating latest tag, making builds less reproducible.