The package is clearly identified, licensed, and has a focused dependency footprint. However, its last release and repository push were in July 2017, with no commits in the last three months, so maintenance risk is high.
45%
Total Score
50
100
78
75
The latest release was in July 2017, with no releases in the last 12 months. Eighteen releases show historical use, but the long period without a release materially raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in July 2017 and indicating substantial maintenance risk.
The repository has only 1 star and 1 fork, offering little supporting evidence of broad community engagement. Popularity is secondary to the clearer maintenance evidence.
Composer is used as the build tool, but no security scanning tools are present. This is a modest transparency and hygiene gap, not evidence of maliciousness.
The linked repository is not archived, although its last push was in July 2017; the unarchived state provides only limited reassurance against the stronger inactivity signal.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zf1/zend-exception Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.