Stable versioning, a matching repository, release notes, tests, and clear licensing support the package. Its last registry release was over three years ago and recent commit activity is absent; all eight workflow actions are also unpinned.
58%
Total Score
75
100
93
100
The latest release was in January 2023, with no releases in the last 12 months, indicating a prolonged pause in publishing. The 12-release history provides some maturity but does not offset the current inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, which raises maintenance and abandonment risk. A push in April 2024 shows the repository was not always inactive, but does not establish current activity.
Both workflows were fully analyzed with no reported security findings or untrusted checkouts, but all 8 of 8 action references are unpinned. This is a supply-chain hygiene weakness, not a severe risk on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-zendframework-bridge Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.