Package Health

zendframework/zend-config-aggregator-parameters

Unfit to use for a new dependency: the package is deprecated and its source repository is archived. It has not released anything since November 2019 and has no recent commit activity; use the listed Laminas replacement instead.

Latest 1.2.0PackagistPackagist

18%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

57

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The package is explicitly abandoned on Packagist at package scope, with laminas/laminas-config-aggregator-parameters named as its replacement. This is a severe adoption and maintenance warning.

Release historydanger

The package has only four releases and none in the last 12 months; its latest release was in November 2019, showing prolonged release inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the abandonment risk shown by the archive and release history.

Repository archiveddanger

The linked repository is archived and was last pushed in January 2020, indicating that normal upstream maintenance has ended.

Project backingcaution

The repository is owned by the zendframework organization, which provides historical project backing, but that does not offset the explicit package abandonment and archived repository.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Maximilian Bösing

Direct Dependencies

DependencyLast ReleaseScore
zendframework/zend-stdlib
Version ^3.1
symfony/dependency-injection
Version ^3.0 || ^4.1.12 || ^5.0
zendframework/zend-config-aggregator
Version ^1.1

Weekly Downloads

Info

Last Published
6 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform