Package Health

webman/auto-route

Usable with caveats: the package is clearly licensed, correctly backed by an organization, and has a matching source repository, but it has had no release or commit activity for nearly four years. Its small community and lack of security tooling add maintenance risk.

Latest v1.0.5PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package has six releases and a stable release history, but its latest release was nearly four years ago and there have been no releases in the last 12 months. This materially lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This is a meaningful abandonment risk, though not evidence that the package is unusable today.

Repo issue activitycaution

There was no issue or pull-request activity in the last month, with one open issue and one open pull request remaining. The low volume is consistent with a small project but provides little evidence of active support.

Repo popularitycaution

The repository has only 4 stars, 2 forks, and 1 watcher, indicating a very small user and contributor community. Popularity is supporting evidence rather than decisive, so this is a moderate concern rather than a severe risk.

Repo toolingcaution

Composer is used as the build tool, which fits this PHP package, but no security scanning tools are configured. The missing scanning is a modest transparency gap, not a standalone adoption blocker.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
4 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform