corviz/framework

A small dependency set, MIT licensing, tests, and a repository that matches the package make its structure clear. The organization-owned project is not archived, but its maintenance evidence is too weak for a new dependency.

Latest v0.8.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published more than three years ago, and there were no releases in the last 12 months. Eight releases since 2018 show some history, but the current release cadence is inactive.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and leaving little evidence of ongoing maintenance.

Repo issue activity

There was no issue or pull-request activity in the last month, with one issue still open. This is consistent with a project that may no longer be actively supported.

Repo popularity

The repository has seven stars and one fork, indicating a small user and contributor footprint. Popularity is only supporting evidence, but this provides little compensating evidence for the maintenance gap.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations, especially for a framework package.