zf1s/zend-rest

Dependency profilecaution

The package declares 11 runtime dependencies, including several related zf1s components and PHP extensions; this is a meaningful dependency surface but is coherent for a framework REST component.

Package scaffoldingcaution

The artifact and repository include a README but neither includes tests or a changelog. The README explains that this is an automatically split package and points users to a main repository, which partly explains the sparse artifact but does not cover the missing repository testing evidence.

Repo bus factorcaution

One contributor made all commits in the last three months, creating a concentrated maintenance risk. Organizational ownership provides some handoff capacity, so this is caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity; the recent release history provides some compensation but not evidence of broad ongoing work.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is present. For a small library this is a hygiene gap, though it is not by itself evidence of abandonment.