Is league/uri safe to use?

league/uri has no known vulnerabilities on the latest version (7.8.1). DepScope rates its health at 58/100 (high risk).

What is the latest version of league/uri?

The latest version of league/uri is 7.8.1, released 2026-03-15.

Does league/uri have known vulnerabilities?

No known vulnerabilities on the latest version of league/uri.

Is league/uri deprecated?

No, league/uri is actively maintained. Latest release: 7.8.1 (2026-03-15).

What are alternatives to league/uri?

DepScope has no curated alternatives for league/uri at this time.

What license does league/uri use?

league/uri is licensed under MIT.

league/uri

composerv7.8.1

URI manipulation library

License MITpermissive41 versions1 maintainers3 deps

thephpleague/uri

/ 100

Health

use with caution

league/[email protected] low health (58/100) — consider alternatives

Moderate health score (58/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

6/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

2.5/10

poor

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

4

Primary author dominance

97%

GitHub stars

1,124

single active maintainer 3msingle author dominance

Health History

Dependency Tree

License Audit

Dependencies (3)

php league/uri-interfaces psr/http-factory

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/league/uri

Last updated · 2026-03-15T20:22:25+00:00