The package is licensed, tested, and has release notes for this version. Organization backing and active repository tooling help, but the broad dependency set and workflow hygiene add maintenance risk.
64%
Total Score
67
50
94
75
The release has twelve runtime dependencies, mostly sibling Zend Framework components, creating a meaningful maintenance surface for consumers. The closely related dependency set is more coherent than an unrelated collection, but still increases upgrade coupling.
The package has been released over roughly eight and a half years, with ten releases and one release in the last twelve months. The long median interval of about ten months indicates slow maintenance rather than abandonment, especially given the recent release.
The repository recorded zero commits and zero active maintainers over the last three months. A release exists within the broader period, but the current lack of activity raises maintenance risk.
There are five open pull requests but no new or merged pull requests in the last month. Together with zero recent commits, this suggests work may be stalled.
The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
diablomedia/zendframework1-acl Version ^1.0.5 | — | — |
diablomedia/zendframework1-uri Version ^1.0.5 | — | — |
diablomedia/zendframework1-view Version ^1.0.5 | — | — |
diablomedia/zendframework1-config Version ^2.0.5 | — | — |
diablomedia/zendframework1-loader Version ^1.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.