uvdesk/extension-framework
The package has a focused codebase, a stable major version, clear installation guidance, and release notes for this version. The license files conflict with the MIT declaration, while repository activity has slowed substantially since the last registry release.
67%
Total Score
67
100
83
100
Health Score Breakdown
The manifest declares MIT, but the repository license file was detected as OSL-3.0. The mismatch creates a material licensing question even though a license file is present.
The package has 11 releases since October 2019, but none in the last 12 months; the latest registry release was about 21 months ago. This lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers during the last three months. Together with the absence of registry releases in the last year, this indicates slowed maintenance.
There is only one open issue and no new or merged issues or pull requests in the last month. This is consistent with a quiet project, though the small issue queue limits the severity of the concern.
Composer is used for builds, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence that the package is unfit to use.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 UVdesk Support |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 uvdesk/core-framework Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.