tempcord/framework
Tempcord/framework appears suitable for adoption, with strong evidence of active early-stage development and reasonable project transparency. It has 17 releases in 14 days, a stable non-prerelease v1.3.0, recent repository activity, 50 commits from three active contributors, 16 merged pull requests, documented source structure, tests in the repository, a changelog, an MIT license, Dependabot, and no deprecation or archive status. The main reservations are that the project is very young, has no packaged tests, has no security policy, shows zero popularity metrics, and has some GitHub Actions permission and pull_request_target exposure; these warrant review before using it in a critical production dependency, but do not by themselves make it unfit.
78%
Total Score
100
100
89
70
Health Score Breakdown
One workflow uses pull_request_target, which deserves review because that trigger can expose privileged workflow context, but no untrusted checkout or script-injection patterns were detected.
The package is only 14 days old, which limits evidence of long-term stability, although 17 releases and a latest release on the collection date show active development.
The repository has zero stars, forks, and watchers, so there is little external adoption evidence; this is supporting evidence only and is partly explained by the package's 14-day age.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
Two workflows lack top-level permissions and the release workflow grants top-level write access, creating avoidable CI privilege concerns even though one workflow is explicitly read-only.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 CyberWolf.Studio |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tempest/log Version ^3.18 | — | — |
tempest/core Version ^3.18 | — | — |
tempest/console Version ^3.18 | — | — |
tempest/database Version ^3.18 | — | — |
tempest/event-bus Version ^3.18 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 25 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.