lamarques/framework
The artifact includes a README, tests, and a changelog, with no install-time scripts and only three runtime dependencies. Its long maintenance gap, absent security policy, and conflicting license signals make continued support and reuse uncertain.
40%
Total Score
50
100
58
75
Health Score Breakdown
The package has had only two releases, with none in the last 12 months, and its latest release was about 10 years ago. This is strong evidence of abandonment risk.
The artifact contains a license file, but the manifest declares Apache 2.0 while the detected license is MIT. That mismatch creates legal and provenance uncertainty despite the presence of licensing text.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the roughly 10-year release gap. The repository is not archived, but there is no observed recent maintenance.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest supply-chain hygiene gap rather than evidence that the package is unsafe by itself.
The repository is not marked archived, which avoids a severe adoption blocker, but its last push was about 10 years ago and therefore does not offset the maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rogerio Lamarques |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^2.5 | — | — |
league/plates Version 3.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.