The small repository audience offers little evidence of ongoing support. Its license, package contents, and dependency setup are clear, but this release should be treated as legacy.
44%
Total Score
0
100
78
75
The package has had no releases in the last 12 months, with the latest release on July 12, 2017. Its long history and 18 releases show maturity, but the prolonged silence materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with no meaningful maintenance since July 2017. This is a substantial concern for a package consumers may need to keep compatible with newer environments.
The repository has only 7 stars, 6 forks, and 1 watcher, providing little supporting evidence of an active user or maintainer community. Low popularity alone is not disqualifying, but it does not offset the lack of recent maintenance.
The project uses Composer, providing basic build and dependency tooling. No security scanning tools were found, leaving a modest process gap alongside the missing security policy.
No repository security policy was found, so there is no documented process for reporting or handling vulnerabilities. This adds a transparency gap, especially for an old package with no recent maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zf1/zend-xml Version self.version | — | — |
zf1/zend-search Version self.version | — | — |
zf1/zend-exception Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.