The package includes a README, extensive tests, a BSD-3-Clause declaration, and no install-time scripts. It is not deprecated or archived, but the repository shows no recent maintenance activity.
38%
Total Score
50
100
72
88
Only two releases were published, with the latest nearly 11 years ago and none in the last 12 months. This is strong evidence of abandonment for a maintained dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push nearly 11 years ago and a substantial abandonment concern.
The repository has zero stars and one fork, providing little supporting evidence of a broad active user community. Popularity is secondary, but it does not compensate for the inactivity.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap, while the much more significant concern remains inactive maintenance.
The linked repository is not archived, but its last push was nearly 11 years ago; the non-archived status does not compensate for the observed inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zendframework/zendframework Version ~2.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.