zelenin/zend-expressive-config
It includes a clear MIT license, documentation, tests, and no install-time scripts. The project has no recent commits and lacks a security policy, leaving this old dependency without active maintenance or current security guidance.
10%
Total Score
0
50
88
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because the release is no longer supported through the registry.
There have been no releases in roughly nine years; the latest release was on August 29, 2017. This strongly indicates abandonment rather than a currently maintained release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its archived state. There is no observed maintenance capacity for fixes or compatibility work.
The linked repository is archived and was last pushed on August 29, 2017. An archived source project is effectively unavailable for normal maintenance.
The repository has no security policy. That is a transparency and response-process gap, although the archived and deprecated status is the more serious concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aleksandr Zelenin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ~2.8 || ~3.0 | — | — |
doctrine/annotations Version ~1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.