vanadiphp/framework

Release historydanger

The package has had no release in about 2 years and 6 months, with no releases in the last 12 months. Eleven releases show some initial activity, but the long pause materially raises abandonment risk.

Dependency profilecaution

The release declares 18 runtime dependencies spanning Filament, Laravel, LDAP, websockets, permissions, settings, and import features. That broad dependency surface increases compatibility and maintenance exposure for adopters.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the extended release pause. This is a meaningful maintenance concern even though the repository is not archived.

Workflow auditcaution

The audit found a high-confidence bot-condition issue and all 12 analyzed action references are unpinned; three workflows also grant top-level write permissions. There is no untrusted checkout or script injection, so this is a significant hygiene concern rather than a standalone release blocker.