diablomedia/zendframework1-log
It includes tests, a matching license, clear source files, and a recent release with PHP 8.5 support. Maintenance has paused for three months, while all workflow actions are unpinned and a high-confidence bot check is flagged.
64%
Total Score
75
100
100
75
Health Score Breakdown
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release and repository push.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not by itself evidence of abandonment.
All five analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the auto-merge workflow. One workflow also grants top-level write permissions; without an untrusted trigger or checkout this remains workflow hygiene risk rather than a severe supply-chain finding.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 diablomedia/zendframework1-config Version ^2.0.5 | — | — |
diablomedia/zendframework1-loader Version ^1.0.5 | — | — |
diablomedia/zendframework1-exception Version ^1.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.