tlumx/framework

Release historydanger

The latest release was nearly eight years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a framework dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows compensating maintenance activity.

Dependency profilecaution

The release declares ten runtime dependencies, including several project-specific and framework components. This is a meaningful dependency surface for an old framework, but the signal does not show it is excessive or unsafe.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low engagement levels provide no additional evidence of community maintenance.

Repo toolingcaution

Composer is used for builds, providing normal project tooling, but no security scanning tools were detected. The missing scanning lowers assurance modestly without proving unsafe dependencies.