mantle-framework/contracts
Regular releases and organization backing provide useful continuity. The package artifact has no README, and the repository shows no security scanning or recent commits, leaving maintenance and consumer guidance weaker than its release cadence suggests.
67%
Total Score
75
100
81
75
Health Score Breakdown
The package has no README, which weakens consumer guidance for a framework contracts library. Missing tests and changelog files are normal for a published PHP artifact and do not count against it here.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent registry release.
The repository has no stars, forks, or watchers. This provides little external validation, but popularity is supporting evidence and does not outweigh the package's strong release cadence.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving disclosure and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alley |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^1.1.1 || ^2.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.