mezzio/mezzio-laminasrouter
Clear licensing, a real test suite, and release notes make adoption easier. Maintenance has slowed, and both workflow action references are unpinned, so ongoing dependency care deserves attention.
68%
Total Score
75
93
100
Health Score Breakdown
The package is mature, with 32 releases since 2019, but only one release in the last 12 months indicates a slower maintenance cadence.
The repository recorded no commits and no active maintainers in the last three months, which is a meaningful sign of reduced current maintenance despite a recent repository push being recorded elsewhere.
Both analyzed workflows use unpinned action references, weakening build reproducibility. However, there are no untrusted checkouts, script-injection findings, dangerous triggers, or high-severity audit findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0.1 || ^2.0.0 | — | — |
mezzio/mezzio-router Version ^3.14 || ^4.0 | — | — |
fig/http-message-util Version ^1.1.5 | — | — |
laminas/laminas-router Version ^3.10.0 | — | — |
laminas/laminas-psr7bridge Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.