Its small dependency footprint and coherent repository make the package easy to understand. However, the project shows little evidence of ongoing maintenance, so pinning this release carries meaningful abandonment risk.
42%
Total Score
50
100
64
50
The latest release was nearly 10 years ago, with only two releases ever and none in the last 12 months. This is strong evidence of abandonment for a package a developer would depend on.
There were no commits and no active maintainers in the last 3 months. Combined with the old release history, this indicates a substantial abandonment risk.
The repository has no stars or forks and only four watchers. Popularity is not decisive, but these numbers provide little supporting evidence of active community use.
No build tools or security scanning tools were detected. For this small package the missing tooling is a hygiene gap, but it reduces transparency around repeatable builds and security maintenance.
The linked repository is not archived, but it was last pushed about 5 years ago. The absence of archival status is reassuring, while the old push date still points to weak current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kerisy/framework Version 3.0.x | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.