frejfrej/zfdebug

The stable version, clear README, and BSD-3-Clause license make its contents easy to inspect. Its single Zend Framework 1 dependency is dated, and the project lacks a security policy.

Latest 1.6.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only one release, published more than 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment despite the stable version label.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but that does not compensate for absent activity.

Dependency profile

The package has one runtime dependency, keeping the dependency surface small, but it depends on Zend Framework 1, which is an obsolete framework generation and limits its maintenance outlook.

Repo tooling

Composer is used for builds, which is appropriate for a Packagist package, but no security scanning tools are configured. This is a modest hygiene gap rather than evidence of unsafe behavior.

Security policy

The linked repository has no security policy. For an old web debugging plugin, this reduces transparency around vulnerability reporting and maintenance expectations.