naluz/framework
The package includes release notes, a changelog, and a clear license. Its single maintainer and absent security policy leave less evidence of long-term support.
58%
Total Score
50
81
67
Health Score Breakdown
One registry maintainer is a thin publishing base for a broad framework, leaving greater continuity risk if that person becomes unavailable.
The repository is owned by an individual user rather than an organization, providing no organizational continuity signal. This reinforces the thin maintainer-base concern but is not a severe issue alone.
Six releases in one day show active initial development, but the package is only one day old, so there is no demonstrated long-term maintenance history.
The repository reports zero commits and zero active maintainers over the last three months. Because the project is only one day old, this is mainly limited history rather than evidence of a collapsed project.
The repository has zero stars, forks, and watchers. The package's one-day age explains some of this, but there is no external adoption evidence yet.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mark Anthony Naluz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
psr/link Version ^2.0 | — | — |
psr/cache Version ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 5 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.