diablomedia/zendframework1-view-helper-json
The package is documented, tested, licensed, and backed by an organization. Recent maintenance is quiet, and the automation workflow has a high-confidence bot-condition issue with all five actions unpinned.
62%
Total Score
75
100
94
50
Health Score Breakdown
The package has existed since 2018 with 10 releases, but only one release in the last 12 months and a median interval of about 315 days indicate a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, indicating currently quiet maintenance despite the recent push timestamp.
No repository security policy was found, leaving vulnerability-reporting expectations unclear; this is a modest transparency gap rather than evidence of abandonment.
The audit analyzed both workflows completely and found a high-confidence bot-conditions issue; all five action references are unpinned, and one workflow has top-level write permissions, weakening CI supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 diablomedia/zendframework1-json Version ^1.0.7 | — | — |
diablomedia/zendframework1-view Version ^1.0.5 | — | — |
diablomedia/zendframework1-layout Version ^1.0.5 | — | — |
diablomedia/zendframework1-controller Version ^1.0.6 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.