Documentation, tests, and a clear dependency manifest improve transparency. The license mismatch and absent security scanning add caution, but the long-maintained silence is the main concern.
40%
Total Score
25
100
69
75
The package has had no release in about ten years and none in the last 12 months, despite 30 historical releases; this is strong evidence of abandonment.
There were zero commits and zero active maintainers in the last three months, consistent with the package having been effectively inactive for years.
The artifact includes a license file and the repository also has one, but the declared MIT license does not match the detected BSD-3-Clause text; consumers should verify which terms apply.
There was no issue or pull request activity in the last month and no pull requests were merged; this provides no evidence of current support.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of adoption or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zfr/rbac Version ~1.2 | — | — |
zendframework/zend-mvc Version ~2.2 | — | — |
zendframework/zend-servicemanager Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.