Its narrow repository footprint and missing security policy reduce transparency for long-term maintenance. Licensing, tests, release notes, dependency scope, and an unarchived organization-backed project provide useful counterweight.
61%
Total Score
75
100
94
75
The project has released 10 versions since May 2018, including one in the last 12 months, but its median interval is about 325 days, indicating a slow maintenance cadence.
There were zero commits and zero active maintainers in the last three months, a concrete sign that current maintenance activity has slowed.
No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.
All five analyzed action references are unpinned, and one workflow has top-level write permissions; the audit also found a high-confidence bot-condition issue. No untrusted checkout or script-injection sink was found, so this is workflow hygiene risk rather than a severe standalone dependency risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
diablomedia/zendframework1-date Version ^1.0.5 | — | — |
diablomedia/zendframework1-crypt Version ^1.0.8 | — | — |
diablomedia/zendframework1-config Version ^2.0.5 | — | — |
diablomedia/zendframework1-exception Version ^1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.