grimm1994/grimm-framework
The brief README gives basic setup guidance, but there are no tests, changelog, license, or security policy. Its small dependency set and lack of install scripts reduce exposure, though they do not offset the maintenance concerns.
38%
Total Score
50
100
67
88
Health Score Breakdown
The package has had no releases in the last 12 months, and its latest release was in October 2022 despite being over three years old. This is strong evidence of abandonment risk.
No registry license declaration or license file was detected in the package or repository. This creates a material adoption and reuse concern.
One registry maintainer is consistent with a user-owned project, but it provides little redundancy if that maintainer stops maintaining the package.
The repository is owned by an individual account rather than an organization, and the registry also has one maintainer. There is no organizational backing to compensate for the thin maintenance base.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of community adoption or review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Grigory Mytarev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vlucas/phpdotenv Version ^5.4 | — | — |
grimm1994/grimm-core Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.