zf-commons/zfc-user

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was five years ago. This is strong evidence that maintenance has effectively stopped.

Dependency profilecaution

The package declares 19 runtime dependencies, mostly Zend Framework components, creating a broad and likely legacy dependency surface. This adds integration and long-term maintenance risk, but the signal does not show an inherently unsafe dependency pattern.

Release historycaution

The package has had no release in nine years despite 19 releases overall. Its earlier monthly cadence shows a once-mature project, but the prolonged release gap materially raises abandonment risk.

Repo issue activitycaution

There are 45 open issues and 13 open pull requests, with no new or closed issues or pull requests in the last month. The unresolved, inactive queue supports the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and maintenance gap rather than evidence that the release is unsafe.