illuminate/routing

Dangerous workflowscaution

One workflow uses pull_request_target, which can require careful handling of untrusted pull requests. No untrusted checkout or script-injection patterns were detected, so this is a workflow-risk caution rather than a severe health failure.

Dependency profilecaution

The package has 18 runtime dependencies, including several related Illuminate and Symfony components. This is a meaningful dependency surface for a routing library, but it is coherent rather than unusually broad based on the provided names.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. That is a real maintenance warning, but it is partly offset by 35 registry releases in the last year and a recent repository push.

Repo issue activitycaution

There were no new or merged pull requests in the last month and no recorded issue activity. This is a modest transparency concern, although issue counts are partly unknown and the release history remains strong.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning automation lowers repository hygiene confidence without showing that the package is unsafe to use.