otobank/aura-uri

The package includes tests, release notes, a clear BSD-2-Clause license, and a minimal runtime dependency. Its workflow has no detected injection or dangerous-token findings, but its security and build hygiene are limited.

Latest 1.4.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with none in the last 12 months; the latest release was over three years ago. This materially raises abandonment risk despite the stable 1.4.0 version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The project is not archived, but current maintenance activity is absent.

Repo popularity

The repository has 0 stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these counts provide no additional evidence of an active user or contributor community.

Repo tooling

Composer is used for builds, which is appropriate, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policy

The repository has no security policy. For a small, stable library this is a documentation gap, but it weakens the available process for reporting and handling vulnerabilities.