This will be true if you’re looking at the zendframework/zendframework package… because it’s a metapackage. In other words, all it does is install other packages. What you need to look at is the various packages on which it depends if you want to see activity. And I can tell you right now: every. single. package. on. which. it. depends. has. had. multiple. new. releases. this. year.
In fact, most had multiple releases last year as well. As I noted in our year-end wrap up in 2017, we published over 260 releases across more than 80 packages last year alone, and we have done similar numbers in the first 6 months of 2018 alone.
If you’re talking about Zend Expressive not getting many updates, perhaps you missed the fact that we released version 3 a few months back? and have had incremental updates to most of the core Expressive packages in the months since? We don’t update the skeleton regularly… because, like the zendframework package, it’s a metapackage, too. Look at the dependencies to get an idea of updates.
I apologize if I’m coming off angry or dismissive; the community puts in a ton of work to get new updates out regularly, and to hear folks claim off-hand that the project has “few updates” or “few packages” (we have almost 200 packages in the ZF/Expressive/Apigility ecosystem!), without qualifying the claim, it feels rather dismissive.
You can help us out: what gives you the impression of few updates? Where do you look for information on updates? If we can get an idea of where people are looking, we can better understand why this impression persists, and come up with solutions for getting our information in front of you, so you’re not working with incorrect data.