blush-dev/framework
The small organization-backed project has no automated tests or security policy, leaving limited safeguards for a framework. Its published package remains an early beta with little evidence of ongoing development.
38%
Total Score
50
69
75
Health Score Breakdown
The package has only one release, published about 4 years ago, with no releases in the last 12 months; this is strong evidence of limited maintenance.
The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and raising abandonment risk.
The package includes a README, which helps consumers, but the repository reports no tests or changelog; for a framework, the lack of tests is a meaningful maintenance gap.
Composer is used for builds, but no security scanning tools are reported, leaving a useful but incomplete maintenance and supply-chain control picture.
The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Justin Tadlock |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^3.0 | — | — |
league/config Version ^1.1 | — | — |
vlucas/phpdotenv Version ^5.4 | — | — |
league/commonmark Version ^2.2 | — | — |
symfony/var-dumper Version ^5.4 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.