The package includes an MIT license, a README, and release notes, but has no tests or security policy. Its small user base and limited project tooling provide little evidence of ongoing support; pin this exact version if adoption is unavoidable.
32%
Total Score
0
64
50
The package has had no release in about 12 years and only three releases overall, indicating a very high abandonment risk despite its early release activity.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the last push occurring in 2014 and providing no evidence of current maintenance.
The repository has only 4 stars, 1 fork, and 2 watchers. Low adoption is supporting evidence of limited project maturity, though it is secondary to the long inactivity.
Composer is used for the build, but no security-scanning tooling is present, leaving an additional transparency and maintenance gap in an already inactive project.
The repository is not archived, which avoids a formal abandonment marker, but its last push was about 11 years ago and does not offset the inactive commit history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zf-commons/zfc-user Version 1.x-dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.