Package Health

hamlet/hamlet-core

Hamlet Framework

Latest 3.4.0PackagistPackagist

48%

Total Score

unhealthy

Risky: no release or repository activity since August 2022, indicating a likely abandoned dependency.

Health Score Breakdown

Release historydanger

The latest release was on August 29, 2022, with no releases in the last 12 months. The package has 58 releases and a rapid historical cadence, but the current multi-year release gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release gap and indicating no recent maintenance capacity.

Licensecaution

The artifact declares Apache-2.0 and includes a license file, but the detected file identifies GPL-2.0. This mismatch creates a meaningful licensing and transparency concern despite the presence of a license.

Workflow auditcaution

Both workflows were analyzed completely with no untrusted checkouts, script injection, or audit findings. However, all six referenced actions are unpinned, leaving avoidable build-integrity exposure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vasily Kartashov

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version @stable
—
—
psr/cache
Version @stable
—
—
twig/twig
Version ^2.5
—
—
guzzlehttp/psr7
Version @stable
—
—
symfony/console
Version @stable
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform