contributte/framex

The repository includes tests, release notes, an MIT license, and organization backing, which support dependable use. GitHub Actions are not pinned, and recent commit activity is absent despite a release this year.

Latest v0.3.0

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is about 3 years old but has only 3 releases, with a median interval of about 394 days and 1 release in the last 12 months. This indicates a slow maintenance cadence, though the latest release was published recently.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months. That is a meaningful maintenance warning, especially alongside the package's generally slow release cadence.

Repo tooling

The project uses Composer and Make, but no security scanning tool was detected. The missing scanner is a hygiene gap, not evidence that the release is unsafe by itself.

Version stability

The latest release is v0.3.0 and is not marked as a prerelease, but the 0.x major version signals an API that may still change. This is a moderate adoption consideration rather than an abandonment concern.

Workflow audit

All 4 workflows were analyzed with no reported audit findings, no untrusted checkouts, and no script injection. However, all 8 analyzed action references are unpinned, leaving avoidable build-integrity exposure.