diablomedia/zendframework1-stdlib

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. The recent release and repository push provide some compensation, but the current maintenance pause remains a concern.

Repo issue activitycaution

There are no open issues and five open pull requests, but none were merged or newly opened in the last month. This suggests unresolved work and limited recent project movement.

Security policycaution

The repository has no security policy. This is a transparency and incident-handling gap, though it is less severe for this small library than for a service or security-sensitive package.

Workflow auditcaution

The audit completed for both workflows and found no untrusted checkout or script-injection paths, but all five action references are unpinned and a high-confidence bot-conditions finding affects the auto-merge workflow. One workflow also grants top-level write permissions, so CI supply-chain hygiene needs attention.