diablomedia/zendframework1-navigation
The package is clearly documented and licensed for consumers. Its small release cadence and idle recent commit activity leave maintenance capacity uncertain, while workflow hygiene adds exposure.
62%
Total Score
75
94
50
Health Score Breakdown
The package has 10 releases since 2018, with one release in the last 12 months and a typical gap of about 10 months between releases. This supports continued publishing but indicates a slow maintenance pace.
No commits and no active maintainers were recorded in the last three months. Although a recent package release and repository push show some activity, the current development pause lowers confidence in ongoing maintenance.
Both workflows were analyzed successfully, but all five action references are unpinned, one workflow grants top-level write permissions, and a high-confidence bot-condition finding may allow actor context to be spoofed. There are no untrusted checkouts or script-injection findings, so this is a hygiene and workflow-risk caution rather than a severe dependency verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 diablomedia/zendframework1-acl Version ^1.0.5 | — | — |
diablomedia/zendframework1-view Version ^1.0.5 | — | — |
diablomedia/zendframework1-config Version ^2.0.5 | — | — |
diablomedia/zendframework1-loader Version ^1.0.5 | — | — |
diablomedia/zendframework1-exception Version ^1.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.