gtt/ad-poller
A Laravel package that polls Active Directory over LDAP and keeps your application's users and groups in sync. Configure connection settings, attribute mappings, and polling schedules to automate imports and keep directory-backed accounts current.
zendframework/* requirements with laminas/* in composer.json) signals this package is an integration layer over the Zend→Laminas component family rather than original business logic. That makes the build-vs-buy math concrete: if the wrapped surface is small and stable, a thin internal adapter may be cheaper to own than a 0.x third-party dependency; if the wrapper carries real glue code (Laravel service provider bindings, config, facades), buying is usually the better trade.zendframework/* is inheriting abandoned upstreams; 0.2.0 removes that liability. This is a hygiene release, not a feature release — it moves the package from "unmaintained transitive risk" to "maintained upstream," which directly affects your security-patch SLA and PHP-version upgrade path.composer.json requirements, the blast radius is dependency resolution, not application code. It is cheap to adopt on greenfield work and potentially disruptive on an existing lockfile that still resolves zendframework/* elsewhere. This informs whether you slot the bump into routine maintenance or treat it as a scoped migration ticket.Consider adopting when:
laminas/* is exactly the remediation such a policy requires.Look elsewhere when:
zendframework→laminas shim. That is a maintenance fix, not a capability; verify there is real Laravel-specific value beyond it.zendframework/* elsewhere. Mixing both families in one lockfile invites duplicate-class and autoload conflicts; consolidate first.Due diligence before adoption:
zendframework/* requirements remain, including in dev dependencies and suggested packages.composer why zendframework/zendframework and equivalent audits on your tree to catch transitively-still-Zend packages — the switch only helps if nothing else reintroduces the old family.Zend\* → Laminas\*), so any code or config referencing the old FQCNs will break.For executives — one paragraph: This release is a maintenance fix that swaps an end-of-life dependency family (Zend Framework, now discontinued) for its actively maintained successor, Laminas. It adds no new features and changes no product surface, but it materially reduces supply-chain and security risk: abandoned upstream packages stop receiving patches, and continuing to depend on them is a finding in most security reviews. The cost to adopt is low — a dependency bump plus regression testing — and the cost to defer is a growing audit exception. Recommend adopting in the next maintenance window if we use this package, and treating it as a blocking prerequisite if we are evaluating it now.
For engineering leads — the technical brief: composer.json moves from zendframework/* to laminas/*. Expect namespace changes from Zend\ to Laminas\ in any published config, facade accessors, or documented FQCNs; grep the codebase and any cached config before deploying. Audit the full dependency tree for residual Zend packages that would reintroduce the old family and cause duplicate-class conflicts. Re-run the test suite against the app's real Laravel and PHP versions, since the release notes do not state a supported-version matrix. Pin the version — this is a 0.x package that has already made one breaking dependency change on a minor bump, so treat the API as unstable and gate future upgrades behind changelog review.
Bottom line: A small, unglamorous, risk-reducing release. No product decision changes hands — but it clears a dependency-hygiene objection that would otherwise block adoption, and it is the kind of maintenance signal worth weighing when judging whether to build on this package or wrap it ourselves.
How can I help you explore Laravel packages today?