The package includes a README, repository tests, a license, and release notes. Organization backing and a security policy help, while unpinned workflow references add a smaller maintenance concern.
67%
Total Score
67
93
83
The package has 13 releases since 2019, but its latest release was nearly two years ago and there were no releases in the last 12 months, indicating a meaningful maintenance slowdown.
The repository recorded no commits and had no active maintainers during the last three months, which raises abandonment risk despite the repository not being archived.
There were no new or closed issues or pull requests in the last month, although six pull requests remain open; this supports a cautious view of current project responsiveness.
All three analyzed action references are unpinned, creating avoidable build reproducibility and action-substitution risk. One workflow also grants top-level write access, but the audit found no untrusted checkout, injection, or high-severity finding.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-i18n Version ^2.13.0 | — | — |
laminas/laminas-router Version ^3.5.0 | — | — |
laminas/laminas-stdlib Version ^3.10.1 | — | — |
laminas/laminas-validator Version ^2.19.0 | — | — |
laminas/laminas-servicemanager Version ^3.15.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.