lms/routes
It includes tests, extensive documentation, a license, and security scanning. Open issues and pull requests have seen no recent activity, and its workflow uses two unpinned actions.
32%
Total Score
50
100
64
67
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption and maintenance warning for a dependency.
The package has 29 releases but none in the last 12 months; its latest release was in November 2021, nearly five years before this assessment. The earlier rapid cadence does not compensate for the prolonged release gap.
The artifact and repository contain a license, so the release is licensed. The declared GPL-2.0-or-later differs from the detected GPL-2.0 license text, creating a minor licensing clarification concern.
The repository recorded no commits and no active maintainers in the last three months. A push in July 2025 shows it is not archived, but current development activity remains absent.
There were no new or closed issues or pull requests in the last month, leaving six open issues and three open pull requests without evidence of current triage.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2021-36793 lms/routes is vulnerable to Exposure of Resource to Wrong Sphere in versions 0.0.0 - 2.1.1. | 0.0.0 - 2.1.1 | Medium |
Package versions
Maintainers
 Serhii Borulko |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^11.5.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.