The repository remains available, matches the package, and has a small dependency footprint. Limited build tooling and security documentation add little reassurance for long-term use.
38%
Total Score
75
100
71
50
Only two releases were published, both in November 2016, with no release in nearly ten years. This strongly raises abandonment risk despite the package not being deprecated.
The repository recorded no commits in the last three months and was last pushed over five years ago. The linked source is still available, but there is little evidence of active maintenance.
The repository has zero stars and forks, with four watchers, indicating very limited visible adoption. Popularity is only supporting evidence, but it offers no compensating maturity signal here.
No build tools or security scanning tools were detected. For a small boilerplate package this is not decisive, but it provides limited evidence of maintained release quality.
The repository has no security policy. This is a transparency gap that matters more when maintenance activity is already weak.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kerisy/framework Version 3.0.x | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.