parable-php/framework

Release historycaution

The package has existed for about five and a half years with seven releases, but only one release in the last 12 months and the latest release was about nine months ago. This suggests a mature but slow-moving project rather than active ongoing development.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a concrete sign that maintenance has currently gone quiet. The recent release and non-archived repository partly offset this but do not remove the concern.

Repo popularitycaution

The repository has 11 stars, four forks, and one watcher, indicating a small user and contributor community. Low popularity is supporting caution, not a standalone adoption blocker.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. The presence of Psalm provides some compensating security practice, but not a reporting process.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, but both of its action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap, not a severe workflow risk.