It has clear licensing, tests, and release notes for this version. The Dependabot auto-merge workflow has a high-confidence bot-condition finding, while recent commit activity is absent.
66%
Total Score
75
100
94
67
The package has been maintained since 2018 with 10 releases and one release in the last 12 months, though the roughly annual cadence indicates limited change activity.
No commits or active maintainers were recorded in the last three months, which weakens evidence of ongoing maintenance despite the recent release and repository push.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a cryptography component.
All five workflow action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; there are no untrusted checkouts or script-injection findings.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
diablomedia/zendframework1-exception Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.