The package includes a license, tests, and no install-time scripts, but its maintenance has effectively stopped and its source repository is archived. Treat this release as a legacy dependency and prefer an actively maintained replacement.
12%
Total Score
50
40
100
Packagist marks the entire package as abandoned, with no replacement listed. Package-level deprecation is a severe adoption risk because future maintenance and support are not expected.
The latest release was in March 2014, and there were no releases in the last 12 months. This long release gap indicates the package is not receiving current maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the archived state, this leaves no observed maintenance capacity.
The linked repository is archived, confirming that the source project is no longer maintained as an active project. Its last push was in December 2019, which reinforces the abandonment risk.
There was no issue or pull-request activity in the last month, with one issue still open. This is consistent with an inactive project rather than an actively supported dependency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zendframework/zendxml Version ~1.0-dev | — | — |
zendframework/zend-uri Version ~2.0 | — | — |
zendframework/zend-http Version ~2.0 | — | — |
zendframework/zend-version Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.