1of0/league-route
The package has a clear README, changelog, MIT license, and no install-time scripts. Its repository could not be found, while the single maintainer and absent release activity leave maintenance and provenance difficult to verify.
35%
Total Score
50
50
70
100
Health Score Breakdown
The package has eight releases, but all were published on March 4, 2016 and there have been no releases in over 10 years. That is strong evidence of abandonment risk for a dependency.
Four runtime dependencies are declared, including a container, routing library, PHP, and PSR HTTP messages. This is a moderate dependency surface that adds some maintenance exposure but is not excessive on its own.
Only one account has registry publish access. Administrative access is not proof of activity, but the thin publisher base increases continuity risk when combined with the lack of recent releases.
The assessed version is the prerelease 2.0.0-RC1, and it is also the latest version. Combining prerelease status with the long release pause makes future compatibility and support uncertain.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Phil Bennett |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/container Version ^2.0.2 | — | — |
nikic/fast-route Version ^0.6 | — | — |
psr/http-message Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.