attogram/router

The package includes tests, release notes, a matching repository, and only one runtime dependency. It lacks security scanning and a security policy, adding transparency gaps.

Latest v4.1.3

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 6 years and 7 months ago, with no releases in the last 12 months. That indicates substantial abandonment risk despite 30 releases overall.

Project backing

The registry namespace and repository owner match, and the repository is owned by a user account rather than an organization. This gives clear ownership but limited evidence of organizational backing.

Repo commit activity

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, even though the repository was pushed recently and the package is not archived.

Repo popularity

The repository has 2 stars, 0 forks, and 0 watchers. Low popularity is supporting context rather than a verdict, but it offers little evidence of a broad user or contributor base.

Repo tooling

The project uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap.