gravatalonga/framework

The project is maintained by one person, has no security scanning, and uses unpinned workflow images. Its README, changelog, tests, and MIT license provide useful baseline transparency.

Latest 1.0.11

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over 3 years ago, with no releases in the last 12 months. Twelve releases in the first year show an established history, but the prolonged halt materially raises abandonment risk.

Repo commit activity

The repository has had no commits and no active maintainers in the last 3 months, with the last push in April 2023. This confirms that the release inactivity reflects an inactive source project.

Project backing

The repository is owned by an individual account rather than an organization, so the single-person maintainer situation is meaningful and offers limited continuity if the owner stops maintaining it.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of community adoption or review.

Repo tooling

Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a maintenance and hygiene gap, though it is less severe than the prolonged inactivity.