jaydenok/jayden-framework
It includes tests, documentation, and a matching repository, but maintenance is concentrated in one contributor. Confirm the license and remove any bundled credentials before relying on it.
38%
Total Score
50
80
50
Health Score Breakdown
The artifact includes file/rsa/private.key, public keys, and log files, creating a serious packaging and credential-exposure concern that outweighs its otherwise substantial file structure.
The manifest declares MIT, while the detected artifact license is Apache-2.0; although license files are present, the mismatch requires clarification before adoption.
The package has only two releases, with none in the last 12 months; its latest registry release is about three years and ten months old, despite the repository being updated more recently.
One contributor made all recent commits, leaving maintenance dependent on a single active person; the repository is user-owned rather than organization-backed.
Only three commits were recorded in the last three months, indicating limited recent maintenance activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 JaydenOK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-di/php-di Version ^6.3 | — | — |
php-http/httplug Version ^2.3 | — | — |
rakit/validation Version ^1.4 | — | — |
guzzlehttp/guzzle Version 7.0 | — | — |
league/oauth2-client Version ^2.6 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.