advancedideasmechanics/mezzio-domain-layout
The dependency surface is small, and Composer plus Semgrep provide useful project hygiene. The package is still young and maintained by one active contributor, while workflow permissions and action pinning need attention.
62%
Total Score
83
100
88
75
Health Score Breakdown
The package is only 94 days old, with five releases clustered within roughly three days; this shows activity but offers little long-term maintenance evidence.
One contributor made all six recent commits. Organization backing provides some handoff capacity, but no second active contributor is evidenced.
No security policy is present, leaving vulnerability-reporting guidance undocumented for consumers and maintainers.
Version v0.0.7 is not a prerelease, but the 0.x major version indicates an API that may still change substantially.
The sole workflow gives all jobs top-level write access and leaves all nine action references unpinned; the audit also found two high-confidence archived-action uses. No untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthew Pallotta |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mezzio/mezzio-router Version ^3.0 || ^4.0 | — | — |
mezzio/mezzio-template Version ^2.0 || ^3.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.