Automatic detection of locales for Zend Framework
55%
Total Score
50
100
81
67
The package has had no release in more than three years, with zero releases in the last 12 months. This is a substantial maintenance concern despite its nine-release history.
There were zero commits and zero active maintainers in the last three months. Combined with the old last release, this indicates a materially elevated abandonment risk.
The linked repository is not archived, but its last push was in November 2022. The non-archived state does not offset the lack of recent activity.
No security policy is published in the repository. This weakens the project's process transparency, though it is less severe than a missing license or archived source.
The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. That is a supply-chain hygiene gap without evidence of an active exploit path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zendframework/zend-http Version ^2.7 | — | — |
zendframework/zend-view Version ^2.9.0 | — | — |
zendframework/zend-router Version ^3.0 | — | — |
zendframework/zend-stdlib Version ^3.1 | — | — |
zendframework/zend-eventmanager Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.