designbymalina/dbmframework
This is a reasonably active and transparent package with 19 releases over 353 days, 18 releases in the last 12 months, a stable non-prerelease version, an unarchived matching repository, a substantial documented source tree, an MIT license, and no install-time lifecycle scripts. The main adoption concerns are that all 11 recent commits came from one contributor, the repository has very little external usage evidence, no tests or changelog were detected, and no security policy or scanning tooling is present. Overall, it appears usable but remains dependent on a single maintainer and has limited independent validation, so it merits caution for critical production dependencies.
72%
Total Score
60
100
83
90
Health Score Breakdown
Two registry publishing accounts are present, but registry access reflects publishing permission rather than demonstrated maintenance activity, so it provides only limited operational reassurance.
A substantial README and GitHub Releases provide documentation and release transparency, but neither the artifact nor repository has tests or a changelog, leaving quality-validation and change-history gaps.
The repository is owned by an individual user rather than an organization, so there is no organizational maintenance bench to offset the concentrated contributor activity.
One contributor made all 11 commits in the last 3 months, creating a concentrated bus factor and increasing abandonment or continuity risk for a user-owned project.
There are no open issues or pull requests and no recent issue or pull-request activity. This avoids an unresolved backlog, but also provides little evidence of community review or collaboration.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Artur Malinowski |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.