Package Health

waaseyaa/framework

Strong documentation, tests, licensing, and security policy support adoption. The project is highly active, but this is still a prerelease and its workflows contain some permission and review hygiene concerns.

Latest v0.1.0-alpha.301PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Dependency profilecaution

The release declares 70 runtime dependencies, including many internal packages, which increases integration and upgrade complexity for adopters.

Version stabilitycaution

Every recent release is a prerelease and the assessed version is v0.1.0-alpha.301, so the API and behavior may still change substantially.

Workflow auditcaution

All 23 workflows were analyzed, all 236 action references are pinned, and 21 workflows use read-only permissions. However, two workflows grant top-level write access and the audit reports high-confidence template-injection and broad GitHub App permission findings, warranting workflow review.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
waaseyaa/api
Version self.version
waaseyaa/cli
Version self.version
waaseyaa/geo
Version self.version
waaseyaa/seo
Version self.version
waaseyaa/ssr
Version self.version

Weekly Downloads

Info

Last Published
3 days ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform