Package Health/reliv/zf-config-factories

reliv/zf-config-factories

It includes tests, a clear README, a matching source repository, and an explicit BSD-3-Clause license. Organization backing and no deprecation notice help, but absent security scanning leaves maintenance transparency weaker.

Latest 4.3.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 29 releases since 2015, but its latest release was about eight years ago and there were no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating that fixes or compatibility updates are unlikely.

Maintainers

There is one registry maintainer, but this is partly compensated by the linked repository being owned by an organization, which provides more backing than a lone personal project.

Repo issue activity

There were no new or closed issues or pull requests in the last month. With no recent commits, this reinforces inactivity rather than demonstrating active issue management.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a transparency and maintenance weakness, not evidence of malicious behavior.