The MIT license and lack of install-time scripts are positives, but they do not offset the package's abandonment. The repository could not be found, so maintenance and provenance cannot be verified; use doctrine/orm instead.
12%
Total Score
25
100
README.md is present, but the published guidance explicitly says not to use the package and recommends Doctrine 2 instead. The absence of tests and a changelog in the artifact is normal packaging practice, so it is not an additional gap.
Packagist marks the entire package as abandoned and names doctrine/orm as its replacement. Package-wide deprecation is a severe adoption risk.
The package has 22 releases but no release in nearly 10 years; its latest release was published in October 2016. This strongly indicates abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^2.2 | — | — |
nette/utils Version ^2.2 | — | — |
nette/caching Version ^2.2 | — | — |
nette/database Version ^2.3 | — | — |
nette/reflection Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.