diablomedia/zendframework1-log-writer-mail

Workflow auditdanger

All five action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The workflow has top-level write permissions, increasing the significance of that automation concern.

Release historycaution

The package has existed for about 8 years and released version 1.0.9 in January 2026, but only one release occurred in the last 12 months and the median interval is about 324 days.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a dependency even though a recent release exists.

Repo popularitycaution

The repository has zero stars and only two forks, offering little independent adoption evidence; popularity is supporting evidence and does not outweigh the maintenance signals.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented; this is a minor transparency gap rather than a standalone adoption blocker.