pt/pt-framework
The license metadata conflicts: the manifest says Artistic-2.0 while the included license file is Apache-2.0. There is no security policy or automated security scanning, increasing maintenance and transparency concerns.
43%
Total Score
0
100
71
50
Health Score Breakdown
The package has had only three releases, with none in the last six years; the latest registry release was in May 2020. This is strong evidence of stalled maintenance for a framework dependency.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current development capacity.
The release declares Artistic-2.0, but the detected LICENSE file is Apache-2.0. Both are present, so the package is licensed, but the mismatch creates avoidable legal and transparency uncertainty.
Composer is used for builds, which is appropriate, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of unsafe code.
The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nolan Chou |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.