Package Health/middlewares/base-path-router

middlewares/base-path-router

The package is focused and well documented, with tests and release notes maintained in the source repository. Its MIT license, organization backing, and non-archived repository support continued use, though workflow references are not pinned.

Latest v2.1.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2018 and has eight releases, but the latest release was about 18 months ago and there were no releases in the last 12 months. This indicates slowing maintenance rather than abandonment by itself.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with roughly 18 months since the last repository push. This is the strongest maintenance concern, although the package may be stable and narrowly scoped.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a modest transparency and hygiene gap.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, but it is not evidence that the package is unsafe.

Workflow audit

The single workflow was fully analyzed with no reported audit findings or dangerous triggers, but all five action references are unpinned. Unpinned actions leave build inputs less reproducible and create a maintenance hygiene concern.