zubzet/framework

Dependency profilecaution

Seventeen runtime dependencies is a substantial graph for a framework, increasing upgrade and transitive-maintenance exposure, though the breadth is understandable for a full-stack framework.

Repo bus factorcaution

Three contributors were active, but one produced about 75% of recent commits; the organization-owned project provides some handoff capacity, partially offsetting this concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful supply-chain hygiene gap for a framework with 17 runtime dependencies.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Version stabilitycaution

This release is a prerelease and 73% of recent releases are prereleases, so the API and behavior may still change even though the major version is established.