Package Health

hearstuk/zf1-component-form

Tests, release notes, a matching README, and a clear MIT license improve transparency. The small dependency set is reasonable, but the project has no security policy and shows no recent maintenance activity.

Latest 1.2PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has made no releases in the last 12 months, and its latest release was in 2013; this is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Maintainerscaution

One registry maintainer is not inherently unhealthy for a user-owned project, but the single-person publishing base provides limited continuity alongside the absence of recent activity.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling issues; the small, old project scope provides no compensating policy evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Joe Green

Direct Dependencies

DependencyLast ReleaseScore
hearstuk/zf1-components-base
Version ~1.2
—
—
hearstuk/zf1-component-filter
Version ~1.3
—
—
hearstuk/zf1-component-validate
Version ~1.1
—
—

Weekly Downloads

Info

Last Published
13 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform