diablomedia/zendframework1-registry

Release historycaution

The package has existed for over 8 years with 10 releases, but only one release in the last 12 months and a typical gap of about 322 days indicate a slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, which is a meaningful maintenance warning despite the recent release and repository push.

Repo issue activitycaution

There are seven open pull requests but no new or merged pull requests in the last month, suggesting limited current review or integration activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended to be depended on by other projects.

Workflow auditcaution

The audit analyzed both workflows and found no untrusted checkout or script-injection paths, but all five action uses are unpinned and a high-confidence bot-condition finding may allow actor context to be spoofed. One workflow also grants top-level write permissions, increasing workflow hygiene risk.