@uirouter/core

UI-Router Core: Framework agnostic, State-based routing for JavaScript Single Page Apps

Latest 6.1.2

NPM

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or staged-publishing evidence is provided, leaving publication provenance less transparent despite the otherwise established project.

Release history

The package has existed for about nine years with 41 releases, but only one release in the last 12 months indicates a slower recent cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign that maintenance may have slowed.

Repo issue activity

There were no new or closed issues or pull requests in the last month, suggesting limited current project activity, although only a small number of issues and pull requests remain open.

Repo tooling

The project uses TypeScript, Rollup, npm scripts, and webpack, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10040 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @uirouter/core is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 1.0.0 - 6.1.1.	1.0.0 - 6.1.1	Low
AIKIDO-2026-10010 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @uirouter/core is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 5.0.14 - 6.1.1.	5.0.14 - 6.1.1	Low