diablomedia/zendframework1-openid

Workflow auditdanger

Both workflows were analyzed, but all five action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. One workflow also grants top-level write permissions, increasing workflow hygiene risk.

Release historycaution

The package has existed for over eight years with 10 releases and a release within the last year, but its median release interval is about 315 days, indicating maintenance is periodic rather than frequent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance; the recent release and push provide only partial compensation.

Repo issue activitycaution

There are no open issues and five open pull requests, but no issues or pull requests were merged in the last month, offering little evidence of active review or responsiveness.

Repo popularitycaution

The repository has zero stars, two forks, and three watchers, indicating a small user footprint; popularity is supporting evidence only and does not outweigh the maintenance signals.