It includes a BSD-3-Clause license, tests, and a README, with a source repository that matches the package. Zero stars and no security policy leave little evidence of ongoing support.
43%
Total Score
75
100
72
83
The latest release was published in November 2018, with no releases in the last 12 months; more than seven years without a release is strong evidence of abandonment risk.
One registry publisher is consistent with the organization-backed project context, but it provides limited evidence of active maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no visible community signal to offset the stale release history.
Composer is used for builds, which fits the package ecosystem, but no security scanning tooling is present. This is a modest transparency and maintenance gap.
The repository is not marked archived, but its last push was in November 2018, so the non-archived status does not compensate for the observed inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zendframework/zendoauth Version dev-master | — | — |
uthando-cms/uthando-common Version 2.* | — | — |
zendframework/zendservice-twitter Version >=2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.