The repository has clear organizational backing, matching documentation, release notes, and tests. Workflow actions are unpinned, so pin this version and verify compatibility before adopting.
68%
Total Score
75
100
90
83
The package has had 21 releases since December 2019 but none in more than three years, which raises maintenance and compatibility concerns for a dependency.
There were no commits or active maintainers in the last three months, although the repository was pushed in January 2026, so recent maintenance is uneven rather than absent.
Both workflows were analyzed successfully and contain no detected dangerous findings, but all 8 action references are unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-mvc Version ^2.7.15 || ^3.0.4 | — | — |
laminas/laminas-http Version ^2.15.1 | — | — |
laminas/laminas-json Version ^2.6.1 || ^3.0 | — | — |
laminas/laminas-view Version ^2.8.1 | — | — |
laminas/laminas-eventmanager Version ^2.6.3 || ^3.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.