league/uri-manipulations
It has tests, release notes, a clear license, and an organization-backed repository. Those strengths do not provide a maintenance path for new fixes.
12%
Total Score
50
50
50
Health Score Breakdown
The package is explicitly abandoned on Packagist and names league/uri-components as its replacement, making this release unsuitable for a new dependency.
The latest registry release was published over eight years ago, and there were no releases in the last 12 months; the earlier release cadence does not compensate for this prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the archived state and indicating no current maintenance capacity.
The linked source repository is archived, so it is no longer an active maintenance venue for fixes or support.
Install and update lifecycle scripts run package code automatically, adding maintenance and installation complexity even though this signal alone does not establish unsafe behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ignace Nyamagana Butera |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 | — | — |
league/uri-components Version ^1.8.0 | — | — |
league/uri-interfaces Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.