laminas/laminas-uri

Maintenance has slowed to one release in the last 12 months and no commits in the last 3 months, though the latest release is recent and the repository remains active enough to support it. All 10 workflow actions are unpinned, reducing build reproducibility.

Latest 2.14.0

Packagist

79%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 78 releases over more than six years, but only one release in the last 12 months. That slower recent cadence is a modest maintenance concern, partly offset by the release being recent.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. The recent release provides some compensation, but the short-term development pause still lowers maintenance confidence.

Repo tooling

Composer is used for the build, but no security-scanning tool was detected. This is a hygiene gap, not evidence that the package is unsafe, and the repository's other transparency signals partly compensate.

Workflow audit

All four workflows were analyzed with no detected sinks or audit findings, but all 10 action references are unpinned and one workflow grants top-level write access. These are reproducibility and least-privilege cautions without an untrusted trigger or sink.