koh/frankenphp

Maintainerscaution

Only one registry publishing account is listed, and the repository owner is an individual rather than an organization. That is a limited publishing and succession base, although it is not evidence of abandonment by itself.

Release historycaution

The package is less than 1 day old with only 2 releases, so it has no established release track record yet. The rapid second release shows active initial publishing but does not demonstrate long-term maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the repository was pushed on the assessment date and the package is less than 1 day old. The short age explains the missing history, while leaving long-term maintenance unproven.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are shown. This is a modest transparency gap for a new package, not evidence of unsafe code.

Workflow auditcaution

No GitHub Actions workflows were present to audit, so there are no workflow findings; this also provides no evidence of automated CI or release safeguards.