Zend Diactoros Laravel Package

Product Decisions This Supports

• Legacy system maintenance only: Suitable for existing applications already dependent on it, but not for new feature development or greenfield projects.
• Build vs. buy: Avoid for new PSR-7 needs; opt for actively maintained alternatives (e.g., Guzzle, Nyholm) to eliminate technical debt and security risks.
• Roadmap implications: Requires migration planning for current usage; should not be included in future product roadmaps due to lack of maintenance.

When to Consider This Package

• Only for maintaining legacy systems where migration costs are prohibitive and immediate risk is acceptable.
• Never for new projects, systems requiring security patches, or environments needing PHP version compatibility updates.
• Look elsewhere if the project demands community support, active development, or alignment with modern PHP standards (e.g., use guzzlehttp/psr7 or nyholm/psr7).

How to Pitch It (Stakeholders)

Executives: "Zend Diactoros is archived and no longer maintained. Adopting it for new projects introduces critical security vulnerabilities and long-term technical debt. We recommend investing in actively supported alternatives like Guzzle’s PSR-7 implementation to ensure compliance, stability, and reduced risk. For existing systems using it, we’ll prioritize migration to modern packages to protect our infrastructure."

Engineering: "This package is deprecated and lacks security updates. While it implements PSR-7, modern alternatives like Nyholm or Guzzle provide active maintenance