Clover PHP: a modern, unopinionated, and lightweight framework.
67%
Total Score
caution
Usable with caveats: this is a brand-new package with little track record.
The package was first released today and has only two releases, so there is not yet enough history to demonstrate sustained maintenance or compatibility stability.
The repository shows no commits from active maintainers in the last three months, but the package and repository were created today, making this a limited track record rather than evidence of prolonged abandonment.
Version v0.0.2 is not a stable major release, which signals an early-stage API and greater likelihood of breaking changes.
All four workflows were analyzed with no reported findings, no untrusted checkouts, and no script injection; however, all nine action references are unpinned, leaving avoidable dependency-integrity exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cloverphp/framework Version ^0.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.