The package is tiny and clearly licensed, with no install-time scripts or registry deprecation. Its release and repository activity stopped in June 2016, leaving current maintenance and compatibility uncertain.
35%
Total Score
25
67
100
The latest release was over 10 years ago, with no releases in the last 12 months and only four releases overall. This strongly raises abandonment and compatibility risk despite the short early release interval.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since June 2016.
A README and GitHub release are present, but the README is only 35 characters and the repository has no tests or changelog. The release record offers some transparency, while documentation remains minimal.
There were no new or closed issues or pull requests in the last month. With the repository already inactive for years, this provides no evidence of ongoing support.
The repository has one star, zero forks, and one watcher, so there is little community evidence to offset the long maintenance gap. Low popularity alone is not a defect for a small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zendframework/zendframework Version 2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.