zf1s/zend-filter

Package scaffoldingcaution

The artifact and repository include a README but neither contains tests or a changelog. For a mature library, the absence of both reduces transparency and makes regression assessment harder.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving maintenance dependent on a single person in the observed period.

Repo commit activitycaution

There was one commit in the last 3 months from one active maintainer, showing recent activity but only limited ongoing development.

Repo toolingcaution

The repository uses Composer for builds, which supports reproducible package management, but no security scanning tool is present. The missing scanner is a transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, though it is not by itself evidence of abandonment.