beansir/newx-framework

The README and repository match the package, but maintenance capacity is effectively absent. Its small footprint and lack of security policy add uncertainty for a framework dependency.

Latest v1.2

Packagist

36%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only 3 releases, all concentrated in March 2018, with no releases in the last 12 months and the latest release about 8 years ago. This strongly indicates abandonment risk.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and providing no evidence of current maintenance.

Project backing

The registry namespace and repository owner are the same individual account, providing direct ownership alignment but no organizational backing to compensate for the absent recent activity.

Repo popularity

The repository has 1 star, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these numbers provide little evidence of a broad user or maintainer community.

Repo tooling

Composer is used as a build tool, but no security scanning tools are present. This is a hygiene gap that adds uncertainty without independently proving the package is unsafe.