advancedideasmechanics/mezzio-canonical-url
The MIT license, useful README, matching repository, and focused dependency set support adoption. However, activity stopped after the initial June release burst, while the workflow uses broad permissions, unpinned actions, and archived actions.
60%
Total Score
88
100
81
83
Health Score Breakdown
Six releases arrived within about one day, but the package is only 97 days old, so this shows an initial burst rather than an established long-term cadence.
The repository recorded zero commits and zero active maintainers over the last three months, indicating that maintenance has paused after the initial release burst.
The linked repository is not archived, but its last push was about three months ago, which reinforces the limited evidence of ongoing maintenance.
No repository security policy is present. This is a modest transparency gap for a dependency, though the package's small scope limits its impact.
Version v0.0.6 is not a stable-major release, so the public API may still change even though it is not marked as a prerelease.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthew Pallotta |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mezzio/mezzio-router Version ^3.0 || ^4.0 | — | — |
mezzio/mezzio-template Version ^2.0 || ^3.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.