rdx/framework

Usable with caveats: the source repository is active and backed by an organization, but the registry has had no release in over three years and all recent commits come from one contributor. The missing security policy adds a transparency gap for a framework dependency.

Latest 2.7

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

License

The package declares a proprietary license in its manifest, so it is not an unlicensed release. However, the proprietary terms may restrict use compared with a typical open-source dependency.

Release history

The package has 16 releases over more than seven years, but its latest registry release was over three years ago and there were no releases in the last 12 months. This raises maintenance and freshness concerns despite a previously regular release cadence.

Repo bus factor

All three recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.

Repo commit activity

The repository recorded three commits in the last three months, indicating some ongoing maintenance. The low activity is modest rather than strong evidence of active development.

Repo tooling

Composer is used as the build tool, providing expected package tooling, but no security scanning tools were detected. The missing scanning capability limits assurance around project maintenance practices.