sinso/app-routes

This is a mature, actively released package with nearly six years of history, 24 releases, five releases in the last 12 months, a stable 6.0.0 release, a non-deprecated registry status, and a linked organization-owned repository that matches the package and documents it. The artifact and repository contain tests, a license, Composer-based build structure, and no install-time scripts or dangerous workflow patterns. The main concerns are zero recorded commits and active maintainers in the last three months despite a recent release, no repository security policy or security scanning, and workflows without explicit top-level token permissions; these reduce transparency and maintenance confidence but do not outweigh the package's release history and repository hygiene.

Latest 6.0.0Packagist

Health Score Breakdown

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. This is a maintenance concern, although the recent registry release and recent repository push provide some compensating evidence.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

No repository security policy was found. This reduces vulnerability-reporting transparency and is a genuine but moderate governance gap.

Token permissionscaution

All 3 workflows lack top-level token permissions declarations. Although none declares top-level write access, explicit least-privilege permissions would provide stronger CI security hygiene.

View all 17 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
typo3/cms-core Version ^14.0	—	—