The Phanda PHP Framework
35%
Total Score
unhealthy
Risky: no release in roughly eight years, with only one registry maintainer.
The latest release was in December 2018, with no releases in the last 12 months; roughly eight years without a release is strong evidence of abandonment.
The package runs a post-root-package-install script, adding install-time behavior that consumers must trust and account for; no provided evidence shows what the script does.
Only one registry account has publish access. That thin publishing base increases continuity and release-control risk, especially alongside the long release gap.
Version v0.1.7 is not a stable major release, so the API may be immature or subject to breaking changes; no prerelease churn partly offsets this.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phanda-framework/framework Version ~0.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.