It includes clear licensing, tests, documentation, and release notes. The organization-backed project has had no commits or releases for about five years, and its only workflow uses an unpinned action.
54%
Total Score
50
50
72
63
There were 54 releases from January 2020 through April 2021, but no releases in the following five years. The strong early cadence is outweighed by the prolonged release gap for a framework dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with no meaningful activity since April 2021. This is the clearest evidence of abandonment risk.
The package has 15 runtime dependencies, primarily Laminas components and related onePlace packages, plus three development dependencies. This is a substantial framework dependency surface but not inherently excessive for the described application foundation.
The package declares a post-create-project-cmd script, so installation can perform project setup actions. This is a modest review concern, but the signal alone does not show unsafe behavior.
There were no new or closed issues or pull requests in the last month, while open issue and pull-request totals are unavailable. The observed inactivity reinforces the maintenance concern but is less conclusive than the commit history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-db Version ^2.10.0 | — | — |
laminas/laminas-log Version ^2.11 | — | — |
laminas/laminas-mvc Version ^3.1.1 | — | — |
laminas/laminas-json Version ^3.1.2 | — | — |
laminas/laminas-mail Version ^2.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.