coyl/sdk-framework
Clear Apache-2.0 licensing, tests, and a detailed README improve transparency. The missing security policy is a secondary concern, while the package's basic dependency and install setup remain straightforward.
38%
Total Score
33
100
69
83
Health Score Breakdown
The package has 18 releases but none in about 9 years, with the latest release on January 5, 2017. This strongly indicates abandonment risk despite its earlier release history.
There were zero commits and zero active maintainers in the past three months. Combined with the last push in 2018, this is strong evidence that maintenance has stopped.
The registry namespace and repository owner are the same individual account, providing consistent ownership context but no organizational backing or broader maintenance capacity.
There were no new or closed issues and no pull-request activity in the past month. This supports the maintenance concern, although the open-issue count is unknown.
The repository uses Composer, showing basic build tooling, but it has no detected security-scanning tools. That is a minor transparency and maintenance gap rather than a standalone adoption blocker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1 | — | — |
psr/http-message Version ~1 | — | — |
doctrine/annotations Version ^1 | — | — |
doctrine/instantiator Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.