Zend Framework 1 Session_SaveHandler_DbTable component
68%
Total Score
caution
Usable with caveats: quiet maintenance and weak workflow pinning reduce confidence.
There were no commits and no active maintainers in the last three months, a meaningful maintenance concern even though the repository was recently pushed and a release was published this year.
There are no open issues and five open pull requests, but no issues or pull requests were merged in the last month; this provides limited evidence of responsive maintenance.
The repository has zero stars and only two forks, so there is little community validation. Popularity is supporting evidence, however, and the organization-backed project has other signs of active publishing.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a session-handling component.
All five analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the auto-merge workflow. No untrusted checkout or script-injection path was found, so this is workflow hygiene risk rather than a severe supply-chain finding.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
diablomedia/zendframework1-db Version ^1.0.5 | — | — |
diablomedia/zendframework1-config Version ^2.0.5 | — | — |
diablomedia/zendframework1-session Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.