atto/framework
Tests, release notes, and recent publishing activity add useful transparency. Organization ownership provides some continuity, but the project explicitly says it is not ready yet and recent work comes from one contributor.
65%
Total Score
67
83
50
Health Score Breakdown
All three recent commits came from one contributor, creating maintenance concentration; organization ownership provides some ability to hand work off but does not remove the current concentration.
Three commits in the last three months show recent work, but all activity came from one active maintainer.
The repository has no stars and only one fork, so there is little external adoption evidence; popularity is supporting evidence rather than a health verdict.
No repository security policy was found, reducing security-reporting transparency for a framework intended to be integrated into applications.
Version 0.1.9 is not a prerelease, but the pre-1.0 major version signals an API that may still change substantially.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carnage |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
league/container Version ^4.2.0 | — | — |
crell/api-problem Version ^3.6 | — | — |
laminas/laminas-stdlib Version ^3.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.