The package includes its README, tests, changelog, release notes, and matching GPL-2.0 licensing. Repository activity has stalled, with no commits, new issues, or merged pull requests in the last three months, while 16 pull requests remain open and no security tooling or policy is present.
62%
Total Score
50
50
83
67
The repository recorded zero commits and zero active maintainers during the last three months. This is the strongest abandonment concern in the available evidence, although the recent push date provides limited compensation.
The package declares 33 runtime dependencies plus numerous PHP extensions, consistent with a full CMS framework but creating a broad maintenance and compatibility surface.
The package uses post-install and post-update Composer scripts. These are relevant operational behavior for a large PHP application and add some installation complexity, but the signal alone does not show harmful behavior.
The package has 39 releases since 2018, but none in the last 12 months and the latest release was on March 1, 2025. This indicates materially slowed maintenance.
There were no new or closed issues and no new or merged pull requests in the last month, while 16 pull requests remain open. This suggests weak current review and maintenance flow.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zetacomponents/base Version ^1.9.4 | — | — |
zetacomponents/feed Version ~1.4 | — | — |
zetacomponents/mail Version ~1.8 | — | — |
zetacomponents/cache Version ~1.6 | — | — |
zetacomponents/debug Version ~1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.