zloynick/joole-framework

Its stable version, clear license, and matching source repository provide useful baseline transparency. The package has little maintenance evidence and no documented security process, so pinning this release carries meaningful abandonment risk.

Latest 8.1.3.2

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over four years ago, with no releases in the last 12 months; only three releases exist in total. This is strong evidence of abandonment despite the short early release interval.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo issue activity

Eleven issues remain open, while no issues or pull requests were opened or closed in the last month. The unresolved backlog adds to the maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That weakens routine oversight of a dependency package.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is not evidence of malicious behavior.