Package Health

cloverphp/framework

Clover: Clover PHP is a modern, unopinionated, and lightweight Express.js-style framework for PHP.

Latest v0.0.3PackagistPackagist

64%

Total Score

caution

Usable with caveats: no commits in the past three months and an early, lightly adopted project reduce maintenance confidence.

Health Score Breakdown

Release historycaution

The package is about 361 days old with three releases and a median interval of about 181 days, showing ongoing publishing but a slow cadence for a young framework.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the past three months, which is a meaningful maintenance warning despite the recent release and merged pull requests.

Repo popularitycaution

The repository has one star, zero forks, and zero watchers, providing little evidence of a broad user or contributor base to support the project.

Version stabilitycaution

The latest release is not a stable major version, so compatibility and API churn remain more likely than for a mature 1.0+ package.

Workflow auditcaution

Both workflows were analyzed successfully and have no reported audit findings, but all six action references are unpinned and one workflow grants top-level write access, leaving avoidable build-integrity exposure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sushil Kumar

Direct Dependencies

DependencyLast ReleaseScore
vlucas/phpdotenv
Version ^5.6
—
—

Weekly Downloads

Info

Last Published
20 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform