avored/framework
Tests, a clear MIT license, and Psalm scanning provide useful project safeguards. The absent security policy and unpinned workflow actions weaken transparency and build hygiene, while recent maintenance evidence is limited.
55%
Total Score
50
86
75
Health Score Breakdown
The package has 84 releases and a regular historical cadence, but it has had no releases in more than three years, which is a substantial maintenance concern for a framework.
There were zero commits and zero active maintainers in the last three months, reinforcing the concern that maintenance has effectively stalled.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear for a framework package.
The only workflow was fully analyzed with no dangerous sinks or high-severity findings, but all three action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Purvesh |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.4 | — | — |
ramsey/uuid Version ^4.2 | — | — |
symfony/yaml Version ^6.0 | — | — |
illuminate/auth Version ^8.2|^9.0 | — | — |
illuminate/http Version ^8.2|^9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.