codingmatters/zend-expressive-zend-component

Release historydanger

The latest release was published in March 2017, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk.

Package scaffoldingcaution

The published artifact has no README, which is a documentation gap for a library consumers must integrate. The source repository does contain tests, partly offsetting the small artifact's limited scaffolding.

Repo package mentioncaution

The repository name does not match the package name, and no README package mention was available. The linked repository may not clearly belong to this package, which weakens provenance transparency.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of active community support.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a maintenance and transparency gap, though not severe on its own.