automattic/zoninator

Clear licensing, release notes, and repository security controls improve confidence. The package is well documented for consumers, with no deprecation or archival warning and a modest dependency footprint.

Latest 0.11.0

Packagist

78%

Total Score

Maintainer Stability

Maturity

100

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

All three-month commit activity came from one contributor. Organization backing provides handoff capacity, but no second recently active contributor is shown.

Repo commit activity

Only one commit was recorded in the last three months, which indicates a slow recent maintenance pace.

Repo issue activity

There were no new or closed issues or pull requests in the last month, leaving some uncertainty about current responsiveness.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10606 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. automattic/zoninator is vulnerable to Insecure Deserialization in versions 0.0.1 - 0.10.2.	0.0.1 - 0.10.2	High
AIKIDO-2026-10604 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. automattic/zoninator is vulnerable to Incorrect Authorization in versions 0.0.1 - 0.10.2.	0.0.1 - 0.10.2	High
AIKIDO-2026-10603 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. automattic/zoninator is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 0.10.2.	0.0.1 - 0.10.2	Medium