agashe/sigmaphp-router

Registry deprecationdanger

Packagist marks the entire package as abandoned and names sigmaphp/sigmaphp-router as its replacement, which is a direct dependency risk despite other healthy evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening the evidence that reported release activity will continue.

Security policycaution

The repository has no security policy, reducing vulnerability-reporting transparency, although this is a secondary concern compared with the package abandonment status.

Version stabilitycaution

Version 0.1.16 is not a prerelease, but remaining before 1.0 signals a less mature compatibility baseline for a library dependency.

Workflow auditcaution

The sole workflow was fully audited with no dangerous triggers or audit findings, but both action references are unpinned, leaving a modest workflow supply-chain hygiene gap.