diablomedia/zendframework1-form

Release historycaution

The package has existed for about 8 years with 11 releases, but only one release in the last 12 months and a median interval of about 306 days indicate slow maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, which is a concrete sign of currently limited maintenance capacity.

Repo issue activitycaution

There are no open issues and five open pull requests, but no pull requests were merged in the last month, offering limited evidence of active follow-through.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

All five action references are unpinned, and a high-confidence audit finding reports spoofable actor context in the Dependabot auto-merge workflow. One workflow also grants top-level write permissions, increasing publishing automation risk.