The package is clearly licensed, documented, and narrowly scoped, which supports predictable integration. Its last release and repository activity were in 2017, with no active maintainers recently. That makes ongoing fixes and compatibility work uncertain.
45%
Total Score
25
100
75
75
The package has 18 releases, but none in the last 12 months and its latest release was in July 2017. This long release gap materially raises abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the last activity occurring in 2017. This is strong evidence of a dormant project.
There were no new or merged pull requests in the last month. Issue counts are partly unknown, so this supports but does not independently establish the broader inactivity finding.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present. The missing scanner is a minor hygiene concern rather than a standalone adoption blocker.
The linked repository is not archived, although its last push was in July 2017. The unarchived status is mildly reassuring but does not offset the observed inactivity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zf1/zend-xml Version self.version | — | — |
zf1/zend-exception Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.