lightpack/framework
It has a clear MIT license, repository tests, release notes, and a security policy. Recent work is substantial, though concentrated in one contributor, and the CI configuration needs stronger reproducibility.
70%
Total Score
75
88
75
Health Score Breakdown
A post-update-cmd lifecycle script runs during dependency updates, creating some installation-time execution risk even though the signal does not show unsafe behavior.
All 204 commits in the last three months came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Composer build tooling is present and the repository has a security policy, but no security scanning tool was detected, leaving a modest hygiene gap.
The sole workflow was fully analyzed with no injection or high-severity findings, but all five action references are unpinned, weakening CI reproducibility; the missing top-level permissions block is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pradeep Tiwari |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.