Package Health

lionelpro/framework

Its MIT licensing, README, and release notes provide basic transparency. No security policy or scanning is visible, and the repository has no meaningful community activity to offset the package and repository mismatch.

Latest 1.0.1PackagistPackagist

35%

Total Score

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

61

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has only one release, published in October 2022, with no releases in the following 12 months or afterward in the collected history. That is strong evidence of an inactive dependency.

Repo package mentiondanger

The linked repository name does not match the package name, and no README mention was found. For a package presenting as a framework, that weakens confidence that the repository is the actual project source.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these values provide no supporting evidence of adoption or community oversight.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a transparency and maintenance gap for a framework package, though it is not severe on its own.

Repository archivedcaution

The repository is not archived, which avoids an abandonment signal, but its last push was on October 5, 2022 and does not offset the package's lack of subsequent releases.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.0|^2.0
ramsey/uuid
Version ^4.2.2
opis/closure
Version ^3.6
symfony/mime
Version ^5.4
nesbot/carbon
Version ^2.53.1

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform