swoft-fork/framework

Release historycaution

This is the package's only release, published 643 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a framework dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the one-release history, this is a substantial abandonment concern.

Security policycaution

The repository has no security policy and no security scanning tools were reported. For a framework intended to run in applications, this weakens vulnerability reporting and maintenance transparency.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, sinks, or audit findings, and no top-level write permissions. However, all 5 of 5 action references are unpinned, leaving avoidable build reproducibility and action-substitution risk.