hearstuk/zf1-component-uri
Ongoing ownership is thin, and no recent maintenance or security process is visible. The small, tested, licensed codebase is clearly matched to its repository, but adoption carries meaningful abandonment risk.
42%
Total Score
50
100
86
88
Health Score Breakdown
Only one registry maintainer is listed, which creates a thin ownership base; the linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader project capacity.
The latest release was nearly 13 years ago, with no releases in the last 12 months; this is strong evidence of an unmaintained dependency despite its early rapid release cadence.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and leaving no evidence of ongoing maintenance.
Composer is used as the build tool, but no security scanning tool is configured; the missing scanning is a minor hygiene gap in the context of the broader inactivity.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in an already inactive project.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joe Green |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hearstuk/zf1-components-base Version ~1.2 | — | — |
hearstuk/zf1-component-validate Version ~1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 13 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.