middlewares/fast-route

Release historycaution

The package has existed for about 10 years with 16 releases, but it has had no release in the last 12 months and its latest release was about 18 months ago. That suggests maintenance has slowed, although the long history and established release pattern provide some maturity evidence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. This is the strongest maintenance concern, though the package's mature history and organization backing partly offset abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no SECURITY.md or other declared security policy. That weakens vulnerability-reporting transparency, although it does not by itself indicate poor package maintenance.

Token permissionscaution

The only workflow lacks top-level token permissions, and no workflow grants top-level write access. The permissions are less explicit than ideal but do not show an excessive write grant.