atasciuc/zend-expressive-validation

Release historydanger

Only two releases were published, with the latest more than 10 years ago and none in the last 12 months. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance capacity.

Dependency profilecaution

Sixteen runtime dependencies create a relatively broad maintenance and compatibility surface for a small validation library. The signal does not show those dependencies are unsafe, so this is a caution rather than a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That limits repository transparency and automated hygiene evidence, although it is not evidence of malicious behavior.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though the package's age and inactivity are more consequential.