zfr/zfr-quaderno-module
The MIT/BSD license mismatch weakens transparency, while the organization-backed repository and release notes provide limited context. No security policy and negligible adoption make the long maintenance gap difficult to offset.
34%
Total Score
50
67
75
Health Score Breakdown
This is the only release, published over 11 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk, despite the stable version label.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long period without releases. No provided activity signal compensates for this.
The artifact declares MIT but its license file was detected as BSD-3-Clause. A license file exists, so this is a transparency mismatch rather than an unlicensed release.
The repository has zero stars and forks and one watcher, providing little evidence of community use or review. Popularity is supporting evidence only, so this modestly reinforces the maintenance concern.
The linked repository has no security policy. This is a meaningful transparency gap for a dependency, although it does not by itself indicate that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michaël Gallego |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zfr/zfr-quaderno Version ~1.0 | — | — |
zendframework/zend-modulemanager Version ~2.2 | — | — |
zendframework/zend-servicemanager Version ~2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.