brightmoon/framework

The MIT license, readable package, and matching repository improve transparency. Dependencies are few and installation runs no lifecycle scripts, but the project lacks tests and security scanning.

Latest v1.0.1

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has made only one release, first published about 35 months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a framework dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. Combined with the long release silence, this indicates a high abandonment risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these figures provide no supporting evidence of an active user or contributor community.

Repo tooling

Composer is used for builds, but the repository reports no security scanning tools. This is a modest transparency and maintenance concern rather than a severe risk.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. For a framework, this is a genuine transparency gap.