sincco/sfphp

Release historydanger

The package has 38 releases, but none in the last 12 months; its latest release was in April 2023, roughly three years ago. The earlier cadence does not compensate for this prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance.

Dependency profilecaution

Eleven runtime dependencies, including framework, database, templating, encryption, and caching components, create a comparatively broad dependency surface for a small framework. No development dependencies or other provided evidence materially offsets that maintenance burden.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding execution and maintenance complexity for consumers. No provided signal shows these scripts are necessary or narrowly scoped.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a framework that handles application requests, sessions, encryption, and database access.