zf1s/zend-openid

Package scaffoldingcaution

The artifact and repository include a README but no tests or changelog. For a small split library this is a transparency and maintenance gap, with no provided repository evidence compensating for it.

Repo bus factorcaution

One contributor made all commits in the last 3 months, creating a concentrated maintenance path. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, showing limited recent development activity. This is partly offset by the package's four releases in the last 12 months, but it still warrants caution.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little community validation. Popularity is only supporting evidence, so this modestly lowers confidence in broad external review rather than making the package unfit.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported; this is a modest security-process gap rather than evidence of unsafe behavior.