mframework/framework
The package includes a usable README and release notes, but has no tests or security policy. The license mismatch and repository naming gap add transparency concerns for long-term adoption.
52%
Total Score
50
67
50
Health Score Breakdown
The latest registry release was in June 2022, with no releases in the last 12 months; this is a significant sign of slowing maintenance for a framework.
The manifest declares MIT, while the included license file is detected as LGPL-3.0. The release is licensed, but the mismatch creates a concrete transparency and compliance concern.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the lack of recent release activity.
The linked repository name does not match the package name and its README does not mention the package, so ownership of the published package is less clear than expected.
The repository has no security policy. For a framework handling HTTP, sessions, and database features, this weakens vulnerability-reporting transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Wynn Chen |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.