The package includes tests, release notes, a clear license, and an organization-backed repository. Maintenance activity is quiet, while all five workflow actions are unpinned and a high-confidence bot-condition issue needs attention.
63%
Total Score
75
94
50
The package has 11 releases over roughly eight years, with one release in the last 12 months and a median interval of about 287 days. The recent release shows continued maintenance, but the slow cadence limits maturity confidence somewhat.
There were zero commits and zero active maintainers in the last three months. The recent registry release and repository push partly offset this, but the current development pause raises maintenance risk.
No repository security policy was found. This is a transparency gap for a maintained library, though the available build and dependency tooling provides some compensating process evidence.
All five analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the auto-merge workflow. There are no untrusted checkouts or script-injection findings, but the workflow hygiene still warrants caution.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
diablomedia/zendframework1-date Version ^1.0.5 | — | — |
diablomedia/zendframework1-crypt Version ^1.0.8 | — | — |
diablomedia/zendframework1-config Version ^2.0.5 | — | — |
diablomedia/zendframework1-loader Version ^1.0.5 | — | — |
diablomedia/zendframework1-locale Version ^1.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.