diogodg/neoframework
Documentation, tests, and licensing are in place. Recent commits show activity, though the single-contributor base and unpinned container image leave meaningful maintenance and build-reproducibility risk.
66%
Total Score
75
92
67
Health Score Breakdown
The package has 22 releases over about 570 days, but only one release in the last 12 months despite a previously rapid median interval of about 1.3 days, suggesting a slower release cadence.
All 16 recent commits came from one contributor, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a framework with authentication and other security-sensitive features.
Both workflows were analyzed, but all 11 action references are unpinned and a high-confidence finding reports a container using the floating latest tag. One workflow also grants top-level write permissions, increasing reproducibility and workflow-hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Diogo Graciano |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
filp/whoops Version ^2.17 | — | — |
adhocore/cli Version ^1.9 | — | — |
nesbot/carbon Version ^3.8 | — | — |
php-di/php-di Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.