diablomedia/zendframework1-view

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which raises maintenance and abandonment concerns; the recent release and repository push provide only partial compensation.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations less transparent for a library with many runtime dependencies.

Workflow auditcaution

All five action uses are unpinned, one workflow grants top-level write permissions, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection path was found, so this is workflow hygiene risk rather than a severe standalone defect.