codexshaper/framework
The GPL-2.0 license, matching repository, and changelog provide basic transparency. A single maintainer, no security policy, and no security scanning leave limited evidence of ongoing support.
53%
Total Score
50
83
50
Health Score Breakdown
Only one registry account has publish access, leaving a thin publishing base. This is some bus-factor concern, although the linked repository is clearly owned by the same project namespace.
The package has made no releases in the last 12 months, and its latest release was published over a year ago. Earlier releases were clustered into a short period, which suggests support may have stopped.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release. The repository is not archived, but current maintenance activity is absent.
Composer build tooling is present, but no security-scanning tools were detected. That weakens automated oversight without showing that the release is unsafe.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Md Abu Ahsan Basir |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^2.0 | — | — |
doctrine/inflector Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.