Xeno is a light-weight, micro framework
58%
Total Score
caution
A very young project has one active contributor, no repository package reference, and four unpinned workflow actions.
The package is only 41 days old and all three releases arrived within minutes on the same day, so there is little evidence of sustained release maintenance.
One contributor made all 13 recent commits, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.
The repository had 13 commits in the last three months, showing recent activity, but all activity came from one maintainer.
The repository name does not match the package name and its README does not mention the package, so the link between the published package and source repository is not clearly demonstrated.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a framework package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ^5.6 | — | — |
phpmailer/phpmailer Version ^6.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.