julienlinard/core-php

Usable with caveats: it has clear documentation, tests, a license, and an active-looking unarchived repository, but only one release exists and there were no commits in the last three months. A solo maintainer and no security policy add maintenance risk for a framework dependency.

Latest 1.4.4

Packagist

62%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Five runtime dependencies are declared, including several related packages from the same publisher. This is a meaningful dependency surface but not inherently excessive for a complete MVC framework.

Maintainers

Only one registry account has publish access, leaving the release process dependent on a single publisher. The repository's tests and documentation provide some compensation but do not remove the bus-factor concern.

Project backing

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to offset the single-maintainer model.

Release history

The package is about nine months old but has only one release, so there is limited evidence of sustained release maintenance.

Repo commit activity

The repository had no commits and no active maintainers during the last three months. For a framework released only once, this is a notable sign of slowing maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Julien Linard

Direct Dependencies

Dependency	Last Release	Score
julienlinard/php-cache Version ^1.0	—	—
julienlinard/php-dotenv Version ^1.0	—	—
julienlinard/php-router Version ^1.2.1	—	—
julienlinard/php-validator Version ^1.0	—	—