yangsuda/framework
This is an actively maintained, stable package with a substantial release history: it is over five years old, has 129 releases, and had 27 releases in the last 12 months, with the current stable version published recently. The linked repository is active, unarchived, correctly associated with the package, uses Composer and GitGuardian, and shows recent pull-request activity. The main adoption concerns are a single active contributor and maintainer, very low repository popularity, and the absence of tests, a changelog, and a security policy in both the artifact and repository. The package is licensed via its LICENSE.md file, and its lack of install scripts reduces installation-time risk; overall, it appears usable but depends heavily on one maintainer and offers limited verification and security-process transparency.
78%
Total Score
70
50
89
83
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 zhucy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 slim/psr7 Version ^1.1 | — | — |
slim/slim Version ^4.5 | — | — |
php-di/php-di Version ^6.1 | — | — |
monolog/monolog Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.