Usable with caveats: it is a stable, licensed Laminas component with a matching organizational repository, tests, and a recent release. Adoption should account for zero commits in the last three months, only one release in the past year, and workflows without declared top-level permissions.
72%
Total Score
83
100
89
90
The package has existed since October 2020 with 15 releases, but only one release occurred in the last 12 months and the median interval is about 97 days, indicating slower current delivery.
The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although the recent release and pull-request activity provide limited compensating evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the repository.
Neither workflow declares top-level token permissions and neither declares read-only permissions. No write permissions are present, but the absence of explicit least-privilege declarations is a workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
laminas/laminas-cache Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.