The package is licensed, documented, tested in the repository, and not deprecated or archived. Workflow references are unpinned and no security policy is present, adding modest transparency and build-hygiene concerns.
70%
Total Score
50
100
88
67
The repository is owned by an individual rather than an organization, so continuity depends on a narrow project owner base.
This is a mature package with 64 releases since July 2014, but only one release in the last 12 months, indicating a slower recent cadence.
There were no commits and no active maintainers in the last three months; the May 2026 push partly offsets this, but recent development activity is still quiet.
There are no open issues or pull requests, and no issue or pull-request activity in the last month; this is neutral for a small stable package but provides little evidence of active support.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-mvc Version ^3.8 | — | — |
laminas/laminas-json Version ^2.5 || ^3.8 | — | — |
laminas/laminas-session Version ^2.26 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.