Package Health

mimmi20/laminas-router-hostname

It has a complete license, repository tests, release notes, and security scanning. Workflow references are all unpinned, and the audit flags unsafe bot checks and template injection.

Latest 4.0.2PackagistPackagist

10%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This directly signals that new dependencies should not be placed on it.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last 3 months, reinforcing the abandonment concern rather than showing active support.

Repository archiveddanger

The linked source repository is archived, which prevents normal ongoing maintenance even though it was last pushed in August 2025.

Release historycaution

The package has 24 releases since July 2021, but none in the last 12 months. The long median release interval is outweighed by the current lack of releases and the package abandonment status.

Workflow auditcaution

All 23 analyzed action references are unpinned, and high-confidence findings flag spoofable bot checks and possible template injection. There are no untrusted checkouts or script-injection findings, so this is a workflow-hygiene concern rather than the main reason for the score.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Thomas Müller

Direct Dependencies

DependencyLast ReleaseScore
psr/container
Version ^1.1.2 || ^2.0.2
—
—
laminas/laminas-uri
Version ^2.13.0
—
—
laminas/laminas-router
Version ^3.14.0
—
—
laminas/laminas-stdlib
Version ^3.20.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform