Package Health

rchaname/framework

The package is a very small framework with no consumer documentation and no security scanning. Its MIT declaration and matching source repository provide basic transparency, but the artifact offers little evidence of maturity.

Latest 0.0.2PackagistPackagist

39%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The last release was in June 2021, with no releases in the past 12 months and only two releases overall. This is strong evidence of abandonment for a framework, with no newer release activity to offset it.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the past three months, consistent with the package's long release gap. This materially raises abandonment risk.

Package scaffoldingcaution

The published artifact has no README, which is a meaningful documentation gap for a framework consumers must integrate with; absent tests and changelog files are normal packaging practice and are not penalized here.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no external sign of an active user or contributor base.

Repo toolingcaution

Composer is used for the build, which is appropriate for a Packagist package, but the repository has no security scanning tools. That weakens maintenance transparency without independently making the release unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ruben Chaname

Direct Dependencies

DependencyLast ReleaseScore
symfony/http-foundation
Version ^5.3
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform