mikrofraim framework core
38%
Total Score
unhealthy
Risky: no releases or repository commits since March 2022, indicating a likely abandoned pre-1.0 package.
The latest release was about 4 years and 6 months ago, with no releases in the last 12 months. Five total releases show some history, but the long gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with maintenance having stopped for about 4 years and 6 months. This is the strongest evidence that adopting the package may create abandonment risk.
The package declares 24 runtime dependencies, spanning framework, HTTP, caching, routing, logging, and templating components. That broad dependency surface increases maintenance and compatibility risk for a package with no recent releases.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a transparency and maintenance weakness, though it is less serious than the prolonged inactivity.
The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, adding a transparency gap for a framework package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 | — | — |
twig/twig Version ^3.3 | — | — |
nyholm/psr7 Version ^1.5 | — | — |
relay/relay Version ^2.1 | — | — |
psr/container Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.