swoft/framework
The package is licensed, tested, and tied to an organization-owned source repository. Unpinned workflow actions and the absent security policy add smaller transparency and reproducibility concerns.
38%
Total Score
0
83
50
Health Score Breakdown
The latest release was published more than five years ago, with no releases in the last 12 months. Although the project has 48 releases and a historically regular cadence, the current gap is a serious abandonment concern.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating no recent maintenance capacity.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a secondary transparency gap beside the more serious maintenance concerns.
Both workflows were analyzed without high-confidence findings or dangerous untrusted-code paths, but all five action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 swoft/aop Version ~2.0.0 | — | — |
swoft/log Version ~2.0.0 | — | — |
swoft/bean Version ~2.0.0 | — | — |
swoft/error Version ~2.0.0 | — | — |
swoft/event Version ~2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.