Package Health

diablomedia/zendframework1-filter

The package includes tests, release notes, a clear license, and an organization-backed repository. Maintenance activity is quiet, while all five workflow actions are unpinned and a high-confidence bot-condition issue needs attention.

Latest 1.0.10PackagistPackagist

63%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 11 releases over roughly eight years, with one release in the last 12 months and a median interval of about 287 days. The recent release shows continued maintenance, but the slow cadence limits maturity confidence somewhat.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent registry release and repository push partly offset this, but the current development pause raises maintenance risk.

Security policycaution

No repository security policy was found. This is a transparency gap for a maintained library, though the available build and dependency tooling provides some compensating process evidence.

Workflow auditcaution

All five analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the auto-merge workflow. There are no untrusted checkouts or script-injection findings, but the workflow hygiene still warrants caution.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
diablomedia/zendframework1-date
Version ^1.0.5
—
—
diablomedia/zendframework1-crypt
Version ^1.0.8
—
—
diablomedia/zendframework1-config
Version ^2.0.5
—
—
diablomedia/zendframework1-loader
Version ^1.0.5
—
—
diablomedia/zendframework1-locale
Version ^1.0.6
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform