diablomedia/zendframework1-test

Workflow auditdanger

Both workflows were analyzed, but all five action references are unpinned, and a high-confidence bot-conditions finding reports spoofable actor context in the auto-merge workflow. One workflow also grants top-level write access, increasing automation risk.

Release historycaution

The package has 11 releases over more than eight years, but only one release in the last 12 months and a median interval of about 264 days indicate a slow maintenance cadence.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, a concrete sign that maintenance has stalled recently.

Repo issue activitycaution

There are no open issues and five open pull requests, but none were created or merged in the last month, offering little evidence of active issue handling.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, not evidence of malicious behavior.