diablomedia/zendframework1-dom

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent release and push provide some compensating evidence.

Security policycaution

The repository has no SECURITY.md or other security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without audit failures, but all five action references are unpinned, one workflow has top-level write permissions, and a high-confidence bot-condition finding reports spoofable actor checks. These are workflow hygiene and automation risks, not evidence that the package is unfit by themselves.