magento/magento-zf-config

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified; this is a direct warning against taking a dependency on the release.

Release historydanger

This is the only release, published over eight months ago, so there is no established release cadence or evidence of ongoing registry maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's abandonment warning.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is secondary to the package's explicit abandonment and inactive commit history.

Workflow auditcaution

All nine analyzed action references are unpinned, which weakens build reproducibility, although the audit found no untrusted checkouts, script injection, or other reported findings.