oprokidnev/zend-session

Risky to adopt: the release is nearly seven years old and the repository has had no commits or active maintainers in the last three months. Licensing, tests, documentation, and a clean package structure provide useful transparency, but they do not offset the lack of recent maintenance.

Latest 2.9.1

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has a substantial history with 79 releases, but its latest release was nearly seven years ago and it had no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year release gap. This materially increases the risk that defects and compatibility issues will remain unaddressed.

Repo popularity

The repository has zero stars, forks, and watchers, offering no supporting evidence of an active user or contributor community. Popularity is not required for a healthy package, but combined with the stale activity it reinforces the maintenance concern.

Repository archived

The repository is not marked archived, which leaves open the possibility of future maintenance. Its last push was nevertheless nearly seven years ago, so the non-archived status is only a limited positive.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a secondary transparency gap, especially because the package manages sessions, but it is less significant than the absence of recent development.