The package is small, licensed, and not deprecated, but its maintenance evidence is weak and its repository has no tests or security policy. Its single-user ownership and negligible adoption leave little visible capacity for ongoing support.
42%
Total Score
33
100
67
75
The latest release was over five years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a package intended as a maintained dependency.
There were no commits or active maintainers in the last three months, reinforcing the long maintenance gap shown by the release history.
The artifact includes a README, while the absence of published tests and a changelog is normal packaging practice; however, the repository also reports no tests, reducing maintenance confidence slightly.
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer concern is not compensated by visible organizational backing.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with an inactive project, though it does not by itself prove abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-stdlib Version ^3.1 | — | — |
laminas/laminas-hydrator Version ^2.2 | — | — |
laminas/laminas-eventmanager Version ^3.1 | — | — |
laminas/laminas-servicemanager Version ^3.3 | — | — |
laminas/laminas-dependency-plugin Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.