Package Health/diablomedia/zendframework1-session

diablomedia/zendframework1-session

The project has a recent release, tests, clear licensing, and organization backing. Maintenance activity is currently quiet, while workflow permissions and unpinned actions add avoidable release-hygiene concerns.

Latest 2.0.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for over eight years and released version 2.0.1 in January 2026, but only one release arrived in the last year with a median interval of about nine months. This supports maturity but indicates a slow cadence.

Repo commit activity

There were no commits and no active maintainers during the last three months. Although the release and recent push show the project is not abandoned, this is a current maintenance concern.

Security policy

The repository has no security policy. That weakens the project's disclosure transparency, though it is a moderate gap rather than evidence that maintenance has stopped.

Workflow audit

All five analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, but the workflow setup still needs tightening.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
diablomedia/zendframework1-config Version ^2.0.5	—	—
diablomedia/zendframework1-loader Version ^1.0.5	—	—
diablomedia/zendframework1-exception Version ^1.1.1	—	—