jobilla/deprecated-routes-middleware

Release historycaution

The package has had no release in over four years, despite a moderate 49-day median interval during its four-release history. This is a meaningful maintenance concern, though the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating currently inactive development. The December 2024 push prevents this from proving abandonment, but it does not offset the present inactivity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small package this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no audit findings or untrusted checkouts. However, all three action references are unpinned, leaving the workflow exposed to upstream action changes.