diablomedia/zendframework1-service

Release historycaution

The package has existed for about 8 years with 10 releases, but only one release in the last 12 months and a median interval of about 315 days indicate a slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance capacity may be limited.

Repo issue activitycaution

There are no open issues and four open pull requests, but no issues or pull requests were created or merged in the last month, offering little evidence of active change handling.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though not by itself evidence of abandonment.

Workflow auditcaution

The audit analyzed both workflows and found no untrusted checkout or script-injection path, but all four action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; one workflow also grants top-level write permissions.