simplemvc/framework

Release historydanger

The package has had no release in about four years, with only three releases overall and none in the last 12 months. This is strong evidence of abandonment risk for a framework dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited current maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues and one pull request remain open; this suggests little current project activity.

Security policycaution

The repository has no published security policy. That reduces transparency for reporting and handling framework vulnerabilities, although it is not evidence of a vulnerability itself.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no dangerous audit findings, but both of its action references are unpinned, leaving avoidable build-provenance risk.