diablomedia/zendframework1-controller

Release historycaution

The package has existed for over 8 years with 12 releases, but only one release in the last 12 months and a median interval of about 257 days indicate a slow maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. The recent release and repository push provide some counterevidence, but the observed development inactivity still raises maintenance risk.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Workflow auditcaution

All 5 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow; the latter is a hygiene concern, while the fully unpinned actions materially weaken build reproducibility.