evilband7/zend-annotation-router

Release historydanger

Only one release exists, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of active maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so ownership and release provenance are less transparent than expected.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy. For a package with no recent maintenance activity, this leaves vulnerability reporting and response expectations unclear.