Package Health/zendframework/zend-diactoros

zendframework/zend-diactoros

Unfit to use for a new dependency: the package is deprecated and its source repository is archived. It has a clear license, documentation, and a stable release, but there has been no release for nearly seven years and no recent repository activity.

Latest 2.2.1

Packagist

20%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names laminas/laminas-diactoros as its replacement. This is a direct warning against adopting this package.

Release history

The package has a substantial history of 53 releases, but its latest release was nearly seven years ago and it had no releases in the last 12 months. The long period without releases is a serious maintenance concern.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. Together with the archived status, this shows maintenance has stopped rather than merely slowed.

Repository archived

The linked source repository is archived, with its last push nearly seven years ago. Archived source indicates the project is no longer maintained.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 27 issues remain open. This is consistent with an inactive, unsupported project.

Vulnerabilities

Title	Versions	Severity
CVE-2015-3257 zendframework/zend-diactoros is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.0.0 - 1.0.4.	1.0.0 - 1.0.4	Medium