The package contains a substantial implementation and has a modest runtime dependency set. Its proprietary license, template README, and nearly two-year release gap make long-term adoption risky; the repository could not be found.
45%
Total Score
100
70
100
The manifest declares a proprietary license, so the release is licensed, but that limits its fit as an open-source dependency. No license file was detected to clarify the terms further.
A README is present, but its content is an unedited Bitbucket tutorial rather than package documentation. The absence of tests and a changelog is normal for a published artifact and is not penalized.
The package has six releases over roughly three years, but no releases in the last 12 months and its latest release was nearly two years ago. That weakens confidence in ongoing maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
zf3fans/zf3-lib Version ^1.0 | — | — |
laminas/laminas-mvc Version ^3.7 | — | — |
laminas/laminas-session Version ^2.17 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.