hexafuchs/laminas-security

Release historydanger

The package is more than two years old, has only four releases, and has had no release in the last 12 months; the latest release was in November 2023. This is strong evidence of stalled maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release since November 2023. No provided signal compensates for this lack of recent activity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected in the repository. For a security-focused package this weakens confidence in the project's development hygiene.

Security policycaution

The repository has no security policy, which is a meaningful transparency gap for a package whose stated purpose is security analysis. The absence is not disqualifying alone but adds to the maintenance concern.

Version stabilitycaution

Version 0.1.3 is not a stable major release, indicating an early-stage package with less maturity than a stable 1.x release. This is a secondary concern beside the lack of recent activity.