The release includes a clear MIT license, a usable README, tests, and regular recent publishing. Its six runtime dependencies and lack of install scripts are manageable, but limited security documentation leaves additional uncertainty.
62%
Total Score
75
100
80
75
All 14 recent commits came from one contributor, creating a meaningful continuity risk if that person becomes unavailable; the repository owner is a user account, not an organization with visible handoff capacity.
The linked repository name does not match this package and its README does not mention the package, so the source relationship is not clearly established and warrants verification.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a framework intended for application development.
Version 0.9.21.3 is not a prerelease, but the package remains below 1.0, so compatibility expectations are somewhat less mature than for a stable-major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
osynapsy/psr Version @stable | — | — |
osynapsy/osynapsy-html2 Version ^1.0 | — | — |
osynapsy/osynapsy-assert Version @stable | — | — |
osynapsy/osynapsy-database Version ^2.0 | — | — |
osynapsy/osynapsy-datastructure Version @stable | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.