mellanyx/di-router

Release historydanger

Only two releases were published, with the latest on February 1, 2022; there have been no releases in roughly 4 years and 7 months. This is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package having been inactive since its last release. No provided signal shows compensating maintenance activity.

Package scaffoldingcaution

The artifact has no README, which makes integration harder for a library consumers must understand. The absence of tests and a changelog is normal packaging practice and does not add risk by itself.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. This is a modest transparency and maintenance gap, though it does not outweigh the direct inactivity evidence.

Security policycaution

The linked repository has no security policy, leaving no documented route for reporting vulnerabilities. This is a hygiene gap rather than evidence that the release is unsafe on its own.