The project has no license and no recorded maintenance since September 2018, leaving long-term fixes and reuse unclear. A README, release notes, and a simple Composer dependency provide some transparency, but the single release and inactive repository remain substantial concerns.
32%
Total Score
0
100
50
83
No license is declared, detected, or included in the package or repository, so developers have no clear permission to reuse the code. This is a material adoption risk.
The package has only one release, published about 8 years ago, with no releases in the last 12 months. That strongly suggests it is unmaintained.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance capacity.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide little evidence of broad review or community support.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was about 8 years ago and this does not offset the absent recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zmhfly/framework Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.