Package Health/diablomedia/zendframework1-currency

diablomedia/zendframework1-currency

The package includes tests, a README, a matching license, and a release note for this version. Its small audience and inactive recent commit history limit confidence, while workflow hygiene needs attention before production use.

Latest 1.0.9

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for over eight years with 10 releases, but only one release in the last 12 months and a median interval of about 325 days indicate a slow cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and repository push provide some counterevidence.

Repo popularity

The repository has zero stars and two forks, showing limited adoption evidence. Popularity is supporting evidence rather than a verdict, so this only modestly lowers confidence.

Security policy

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself show abandonment.

Workflow audit

All five action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The audit found no untrusted checkout or script injection, but these workflow weaknesses remain a supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
diablomedia/zendframework1-cache Version ^1.0.6	—	—
diablomedia/zendframework1-loader Version ^1.0.5	—	—
diablomedia/zendframework1-locale Version ^1.0.6	—	—
diablomedia/zendframework1-exception Version ^1.1.1	—	—