diablomedia/zendframework1-controller-action-helper-contextswitch

Dependency profilecaution

Six runtime dependencies make this component part of a broader set of coupled Zend Framework packages, increasing upgrade coordination compared with a standalone library.

Release historycaution

The package has existed for over 8 years with 11 releases, but only one release in the last 12 months and a median interval of about 298 days indicate a slow maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern, although the recent release and repository push provide limited compensating evidence.

Security policycaution

No security policy is present, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All five action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the auto-merge workflow. Top-level write permissions in one workflow add further hygiene risk, though no untrusted checkout or script-injection sink was found.