shadowsky/framework
Its 21 runtime dependencies increase upgrade and compatibility burden for a small pre-1.0 framework. MIT licensing, a README, and tests provide useful transparency, but they do not offset the maintenance risk.
45%
Total Score
0
50
71
75
Health Score Breakdown
The latest release was about 9 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite 16 historical releases.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing that current maintenance has stopped.
The package declares 21 runtime dependencies across framework, database, templating, mail, cloud, and authentication components. That broad dependency surface increases compatibility and maintenance burden.
Composer is used for builds, but no security scanning tool is configured. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The long maintenance gap makes this more relevant.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 orvice |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 slim/csrf Version 0.5.* | — | — |
slim/slim Version ^3.5 | — | — |
twig/twig Version ~1.0 | — | — |
predis/predis Version ~1.0 | — | — |
smarty/smarty Version ~3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.