Usable with caveats: this is a well-documented, tested, licensed package with a stable release history, but maintenance appears dormant. The last release was in August 2020 and there have been no commits or active maintainers in the past three months, so future compatibility and fixes are uncertain.
58%
Total Score
50
100
78
90
There were zero commits and zero active maintainers in the past three months. Combined with the last release being in 2020, this strongly suggests the project is dormant and may not receive fixes or compatibility updates.
The package has 15 releases since 2013, but its latest release was in August 2020 and it had no releases in the last 12 months. This long release gap is a meaningful maintenance concern despite the established history.
The repository has zero stars and one fork, so it has little visible adoption evidence. Popularity is only supporting evidence, and the complete package structure means this does not independently make the package unfit.
Composer is used as a build tool, but no security-scanning tools are present. The missing scanning is a transparency gap, although the absence of workflows limits the practical impact of that gap.
The linked repository is not archived, but it was last pushed in August 2020. Its unarchived status is positive, while the stale repository state is outweighed here by the more direct commit-activity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-mvc Version ^2.7.15 || ^3.1.1 | — | — |
laminas/laminas-http Version ^2.10 | — | — |
laminas/laminas-eventmanager Version ^2.6.4 || ^3.2.1 | — | — |
laminas/laminas-servicemanager Version ^2.7.9 || ^3.4.0 | — | — |
laminas/laminas-dependency-plugin Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.