Usable with caveats: it is a mature, actively released package from an unarchived organization-owned repository, but maintenance is concentrated in one contributor and the package and repository contain no tests or changelog.
70%
Total Score
67
100
88
90
The artifact has a README but no tests or changelog, and the linked repository also has neither. The README directs issues and pull requests to the main repository, which explains the split-package layout but does not provide direct test or change-history evidence here.
All recent commits came from one contributor, giving a 100% top-contributor share. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.
The repository recorded 1 commit in the last 3 months from 1 active maintainer. Recent activity is positive, but the very low volume limits evidence of sustained maintenance.
The repository uses Composer build tooling, which supports reproducible package handling, but it reports no security scanning tools.
No repository security policy is present. That is a transparency gap for reporting vulnerabilities, although it is not evidence that the package is unsafe by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zf1s/zend-validate Version ^1.16.2 | — | — |
zf1s/zend-exception Version ^1.16.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.