diablomedia/zendframework1-date

Release historycaution

The package has 10 releases over more than eight years and released once in the last 12 months, with the latest release on January 14, 2026. The long median interval shows a slow cadence, but the recent release indicates the project is not abandoned.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens confidence in ongoing maintenance, even though a recent release and repository push provide some contrary evidence.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it is a secondary concern for a small, stable component.

Workflow auditcaution

All five analyzed action references are unpinned, and the Dependabot auto-merge workflow has a high-confidence bot-conditions finding marked high severity. The audit was complete and found no untrusted checkout or script-injection paths, which limits the overall impact.