offsetwp/framework
Usable with caveats: it is a clearly documented, tested, licensed package backed by a matching organization repository, but it is very new and has had no commits in the last three months. The lack of security policy and scanning also leaves maintenance and security-process gaps.
62%
Total Score
75
86
83
Health Score Breakdown
The package is only 171 days old and has two releases, with roughly 172 days between releases; this limited history provides little evidence of long-term maintenance stability.
The repository recorded zero commits and zero active maintainers during the last three months, a meaningful warning that current development may have stalled despite the recent push and release.
Composer build tooling is present, but no security scanning tools are configured; this is a process gap for a dependency intended for application use.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jérôme Wohlschlegel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^8.1 | — | — |
symfony/dependency-injection Version ^8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.