The MIT license and matching repository make the package straightforward to identify and reuse. Its dependency set is tied to the old Zend Framework 2 ecosystem, while the README is only 55 characters and offers little integration guidance.
32%
Total Score
0
50
67
75
This package has only one release, published nearly 13 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a library dependency.
The repository recorded no commits or active maintainers in the last three months, and its last push was over 11 years ago. This leaves little evidence of ongoing maintenance.
The package declares seven runtime dependencies, including Zend Framework 2 and related Doctrine modules. This tightly couples adoption to an outdated framework ecosystem and increases compatibility risk.
The artifact has a README and a GitHub release for this version, but the README is only 55 characters and provides no meaningful usage guidance. The absence of packaged tests and a changelog is normal for a published artifact, so it is not penalized.
The repository has only 2 stars and no forks. Popularity is supporting evidence rather than a verdict, but these numbers provide little additional evidence of community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
imagine/imagine Version >=v0.4.1 | — | — |
spalax/zf2-libs Version 0.0.* | — | — |
doctrine/migrations Version >=v1.0-ALPHA1 | — | — |
doctrine/doctrine-module Version >=0.7.2 | — | — |
zendframework/zendframework Version >=2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.