luxid/framework

The package is clearly licensed and documented, but its unusually compressed release cadence makes version quality harder to judge. Development is concentrated in one contributor, and no repository security policy or automated security scanning is present.

Latest v0.8.5

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement named. This is a major adoption and maintenance warning even though the repository remains active.

Release history

The package has 77 releases in 278 days, with a median interval of about 54 minutes. That shows activity but an unusually compressed cadence, which makes release quality and stability harder to assess.

Repo bus factor

All 15 recent commits came from one contributor, leaving maintenance dependent on a single person and creating a meaningful continuity risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That reduces automated coverage for a framework package with several runtime dependencies.

Security policy

The repository has no security policy, so users have no documented process for reporting vulnerabilities or understanding security response expectations.