assetic/framework
Healthy and suitable to depend on. It has a long release history, seven releases in the last year, active multi-contributor maintenance, and a clear licensed source repository; the main caveats are missing security scanning and a security policy.
88%
Total Score
100
100
94
80
Health Score Breakdown
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and hygiene gap, though it is not evidence that the release is unsafe by itself.
The repository has no security policy. This weakens vulnerability-reporting transparency, but active releases and distributed contributors provide compensating maintenance evidence.
Neither workflow declares top-level token permissions. Although no workflow requests top-level write access, explicit least-privilege permissions would provide stronger CI hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kris Wallsmith |
| Jack Wilkinson |
| Luke Towers |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ^3.4 || ^4.0 || ^5.0 || ^6.0 || ^7.0 | — | — |
symfony/deprecation-contracts Version ^2.2.0 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 16 days ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.