hearstuk/zf1-components-base

Release historydanger

The package has had only two releases, both in September 2013, with none in the last 12 months. Nearly 13 years without a release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity for nearly 13 years.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not have organizational backing to compensate for inactivity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were found. For a package this old, the missing scanning adds a modest transparency and maintenance concern.

Security policycaution

The repository has no security policy. This is a maintenance and disclosure gap, though it is less important than the long-established lack of release and commit activity.