swith/framework

The repository has no tests or security policy, and installation runs a post-create script. Its MIT licensing, clear README, changelog, and matching repository reference provide useful transparency, but the project appears abandoned for long-term dependency use.

Latest v2.2.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only four releases and none in the last 12 months; its latest release was on September 10, 2016, indicating roughly nine years and six months without a release.

Lifecycle scripts

The post-create-project-cmd script runs during project creation, adding installation-time behavior that consumers must trust and maintain across environments.

Maintainers

Only one registry account has publish access. That is a thin publishing base for a user-owned project and increases continuity risk when combined with the long inactivity period.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. With the repository last pushed in 2016, this is consistent with abandonment rather than a healthy quiet project.

Repo popularity

The repository has two stars and three forks, providing little supporting evidence of broad review or community maintenance. Popularity is only supporting evidence, so this is a modest concern rather than a decisive one.