willitscale/streetlamp

Clear licensing, documentation, tests, and a matching source repository make adoption easier. The small dependency set and read-only workflow permissions help, but the project lacks recent release and commit activity, a security policy, and pinned actions.

Latest 2.0.8

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 29 releases since January 2023, but it has had no release in the last 12 months despite a latest release in August 2025. That is a maintenance concern for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with no releases in the last 12 months, this indicates slowed maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a transparency and maintenance gap, not evidence of malicious behavior.

Security policy

The repository has no security policy. For a routing library, that leaves vulnerability reporting and response expectations unclear.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous sinks or audit findings. However, all 3 action references are unpinned, leaving build inputs less reproducible.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

willitscale

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
php-di/php-di Version ^7.0	—	—
psr/http-message Version ^2.0	—	—
psr/simple-cache Version ^3.0	—	—
psr/http-server-middleware Version ^1.0	—	—