Usable with caveats: the release is stable, licensed, clearly backed by its matching repository, and has no install scripts or deprecation notice. However, it has had no release or commit activity since July 2017, so maintenance and compatibility risk are significant.
58%
Total Score
33
100
78
88
There were zero commits and zero active maintainers in the last three months. Combined with the last release being in July 2017, this is the main reason to expect limited maintenance support.
The registry namespace and repository owner both use zf1, and the repository owner is an individual account rather than an organization. This is coherent backing, but it offers less apparent organizational continuity.
The package has 18 releases and a stable release history, but its latest release was in July 2017 and there were no releases in the last 12 months. That long period without updates raises compatibility and abandonment concerns.
There were no new issues or pull requests in the last month and no merged pull requests. This is consistent with an inactive project, though the open-issues count is unknown.
The repository has only 1 star and 4 forks, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, but it provides little additional confidence for this old package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zf1/zend-uri Version self.version | — | — |
zf1/zend-xml Version self.version | — | — |
zf1/zend-view Version self.version | — | — |
zf1/zend-config Version self.version | — | — |
zf1/zend-loader Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.