Documentation and basic project structure are solid, with tests, a declared license, and no install-time scripts. The release and commit records stop in 2019, while the assessed version conflicts with the reported latest version, making long-term maintenance and release provenance uncertain.
42%
Total Score
50
64
83
The package has 51 releases but none in the last 12 months, and its latest reported release was about 7 years ago. This long pause materially raises abandonment risk despite the earlier release cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. This is strong evidence that active maintenance is currently absent.
The assessed version is 2.0.1, while the signal reports 1.3.9 as the latest version. That inconsistency makes it harder to verify the release's place in the project's supported history.
The repository has only 2 stars and 1 fork, so there is little community evidence to support ongoing maintenance. Popularity is supporting evidence, however, and the stronger concern is the lack of recent activity.
No repository security policy was detected. This is a transparency and reporting gap, though it is secondary to the release and maintenance concerns.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zendframework/zend-db Version ^2.9 | — | — |
t4web/domain-interface Version ~1.1.0 | — | — |
zendframework/zend-eventmanager Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.