nova-framework/framework

Release historydanger

The package has 425 releases since 2016, but none in the last 12 months and the latest release was about 6 years and 9 months ago. The long earlier history shows maturity, but the prolonged release gap is strong abandonment evidence.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This confirms that the old release history is not being followed by current development.

Lifecycle scriptscaution

The package defines post-autoload-dump, post-create-project-cmd, post-install-cmd, and post-update-cmd scripts. Install-time behavior increases dependency and review risk, though the signal alone is not evidence of unsafe behavior.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for this PHP package, but no security scanning tools are configured. This is a meaningful hygiene gap for a framework with substantial runtime dependencies.

Repository archivedcaution

The repository is not archived, which is a modest positive and leaves open the possibility of future maintenance. Its last push was about 5 years and 8 months ago, so this does not offset the inactive commit record.