opensolutions/oss-framework
Usable with caveats: the package is clearly licensed, documented, tested, and backed by the matching organization repository. However, it has had no registry releases in over three years, no commits in the last three months, and explicitly receives only bug and security maintenance.
58%
Total Score
75
88
50
Health Score Breakdown
The package has only 3 releases since February 2014 and no releases in the last 12 months; its latest registry release was over three years ago. This indicates very slow maintenance and raises abandonment risk, though the project may be intentionally stable.
There were 0 commits and 0 active maintainers in the last three months. Combined with the README's maintenance-only statement, this is a meaningful concern for future fixes and development.
The repository uses Composer build tooling, but no security scanning tools are present. This is a modest supply-chain hygiene gap, not evidence that the package is unsafe by itself.
The repository has no published security policy. That weakens transparency around vulnerability reporting, although the README does state that security fixes are still maintained.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 shardj/zf1-future Version ~1.12 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.