laminas/laminas-config-aggregator-parameters
Usable with caveats. The package is licensed, clearly backed by an organization, tested in its repository, and has a recent stable release, but repository activity has been absent for the last three months and workflow security hygiene is incomplete.
72%
Total Score
75
88
83
Health Score Breakdown
The package has been released 21 times since 2019, with one release in the last 12 months and a latest release on October 15, 2025. This supports maturity but indicates a relatively slow release cadence.
The repository recorded no commits and no active maintainers during the last three months. Although the release is recent, this weakens evidence of ongoing maintenance capacity.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a maintenance and transparency gap, though it is not by itself evidence that the package is unsafe.
All three workflows lack top-level token permission declarations. Explicit least-privilege permissions would improve workflow security hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laminas/laminas-stdlib Version ^3.17 | — | — |
symfony/dependency-injection Version ^6.2.8 || ^7.0 | — | — |
laminas/laminas-config-aggregator Version ^1.13 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.