flamesphp/framework

Release historydanger

This package has only one release, about 11 months after its first publication, so there is little release history to demonstrate sustained maintenance.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, despite a recent push date, leaving current development activity unproven.

Licensecaution

The artifact declares MIT and includes a license file, which is positive, but the detected file text also names Apache-2.0, BSD-3-Clause, and GPL-2.0, creating a material declaration mismatch.

Lifecycle scriptscaution

The package runs post-create, post-install, post-root-install, and post-update scripts, increasing installation-time behavior and supply-chain exposure for consumers.

Maintainerscaution

Only one registry account has publishing access. The linked repository is user-owned rather than organization-owned, so there is little visible publishing redundancy.