saeven/zf3-circlical-user

Release historycaution

The package has 14 releases since July 2016, but none in the last 12 months and the latest registry release was in June 2023. This indicates a substantial maintenance pause, partly offset by its established history.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the long gap since the latest registry release, this raises the risk that fixes and compatibility updates will not arrive promptly.

Security policycaution

No repository security policy was found. For an authentication and access-control module, that reduces transparency around vulnerability reporting and response.

Version stabilitycaution

Version 0.3.2 is not marked as a prerelease, but the package remains below major version 1.0. That makes API stability less certain for a dependency with no recent releases.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings, no untrusted checkout or script-injection paths, and no top-level write permissions. However, all 3 action references are unpinned, leaving a modest workflow supply-chain hygiene gap.