jidaikobo/kontiki-framework
Recent commits and a current release provide useful maintenance evidence. The one-person contributor base, absent security policy and security scanning, and low recent release frequency warrant caution for long-lived dependencies.
68%
Total Score
63
50
78
67
Health Score Breakdown
Twelve runtime dependencies create a meaningful dependency surface for this framework, though the signal does not show an excessive or obviously unsafe dependency profile by itself.
Only one registry account has publish access. Because the repository is user-owned, there is no organization backing shown to compensate for this concentration.
The repository is owned by an individual account rather than an organization, providing no organizational maintenance handoff or broader backing signal.
The package is 562 days old with 40 releases, but only 2 releases occurred in the last 12 months; the recent release history is therefore slower than its earlier cadence.
All six recent commits came from one contributor, leaving no demonstrated backup maintainer and increasing abandonment risk if that person becomes unavailable.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 jidaikobo-shibata |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 slim/psr7 Version ^1.7 | — | — |
slim/slim Version ^4.15.2 | — | — |
aura/session Version ^4.0 | — | — |
nesbot/carbon Version ^3.8 | — | — |
php-di/php-di Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.