Usable with caveats: the release is licensed, tested, actively published, and backed by a non-archived organization repository. However, the repository had no commits or active maintainers in the last three months, and its very small audience plus limited security-policy coverage warrant review before adoption.
72%
Total Score
67
100
89
67
The package has existed for over eight years with 12 releases, and the latest release was published about eight months before collection. Only one release in the last 12 months indicates a slow but not abandoned cadence.
The repository recorded zero commits and zero active maintainers over the last three months. This is a meaningful maintenance concern, although the recent release and repository push provide some compensating evidence.
There are no open issues and seven open pull requests, but none were merged in the last month. The pending pull requests suggest work exists while also indicating limited recent integration activity.
The repository has zero stars, two forks, and three watchers, indicating a very small user and contributor audience. Popularity is supporting evidence rather than decisive evidence, so this lowers confidence in long-term community support without making the package unfit.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
diablomedia/zendframework1-json Version ^1.0.11 | — | — |
diablomedia/zendframework1-exception Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.