diablomedia/zendframework1-progressbar

Dependency profilecaution

The release has six runtime dependencies within the same maintained-looking component family plus PHP. This is a meaningful dependency surface, but it is coherent rather than unusually broad.

Release historycaution

The package has 10 releases since March 2018 and one release in the last 12 months, including a latest release on January 13, 2026. The roughly yearly median release interval indicates modest rather than rapid maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent release and organization backing partly offset this, but the current maintenance pace remains uncertain.

Security policycaution

No repository security policy was found. This is a transparency and reporting gap, though it is not by itself evidence of abandonment.

Workflow auditcaution

All five action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The workflows had no untrusted checkout or script-injection findings, so this is a real hygiene concern rather than a severe release risk.