poshtive/router
The package includes tests, a changelog, documentation, and an MIT license. Organization backing and active releases help, while one-person maintenance, no security policy or scanning, and unpinned workflow actions warrant monitoring.
78%
Total Score
83
100
94
75
Health Score Breakdown
All 41 recent commits came from one contributor, so maintenance depends heavily on a single individual. Organization ownership provides some handoff capacity but does not remove the current concentration risk.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no published security policy, which makes vulnerability reporting and response expectations less clear for a dependency.
The single workflow was fully analyzed with no injection or high-severity findings, and it scopes permissions at job level. However, all 7 action references are unpinned, weakening build reproducibility and action-integrity controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^7.4 | — | — |
illuminate/routing Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/pipeline Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.