diablomedia/zendframework1-oauth

Release historycaution

The package has existed for about 8 years with nine releases, but only one release in the last 12 months and a median interval of about 344 days indicate slow maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign of currently paused maintenance and increased abandonment risk.

Repo issue activitycaution

There are no open issues but five open pull requests, with no issues or pull requests merged in the last month; this suggests unresolved maintenance work.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the auto-merge workflow, all five action references are unpinned, and one workflow grants top-level write access. The workflows were fully analyzed and no untrusted checkout or script-injection sink was found, so this is a hygiene and workflow-integrity concern rather than a severe standalone health verdict.