The last post on the https://enhance.dev/ blog suggested that this project would still be maintained. The current 1.2.1 release depends on @architect/sandbox at 6.0.5, which includes router and send versions which have vulnerabilities reported by npm audit.
It looks like the current head-of-tree has some updated dependencies -- if this project is still active, it might make sense to cut a new release where npm audit doesn't produce warnings.