diablomedia/zendframework1-soap

Release historycaution

The package has nine releases over more than eight years, with one release in the last 12 months. The long median interval of about 340 days indicates a slow but established release cadence rather than abandonment by itself.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful warning about current maintenance responsiveness.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All five action references are unpinned, and a high-confidence high-severity bot-conditions finding says actor context may be spoofable. The audit found no untrusted checkout or script-injection sink, which limits the workflow risk but does not remove the hygiene concern.