atheon/orm

The package includes tests in its repository, a usable README, a license, and a security policy. Its workflows use all 33 actions without pinning, adding a smaller reproducibility concern alongside the much larger maintenance risk.

Latest 2.13.3

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its last recorded release activity was nearly four years ago despite 105 historical releases. This is strong evidence that maintenance has stopped.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the stale release history and indicating little current maintenance capacity.

Repo popularity

The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this absence provides no indication of an active user or contributor community.

Version stability

The release is a stable major version and not a prerelease, which supports maturity, but the registry reports latest version 2.7.8 while the assessed release is 2.13.3, creating a material metadata inconsistency.

Workflow audit

All five workflows were analyzed with no detected sinks, high-confidence findings, or incomplete files, and none uses broad top-level write permissions. However, all 33 analyzed action references are unpinned, which weakens build reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Guilherme Blanco

Roman Borschel

Benjamin Eberlei

Jonathan Wage

Marco Pivetta

Direct Dependencies

Dependency	Last Release	Score
psr/cache Version ^1 \|\| ^2 \|\| ^3	—	—
doctrine/dbal Version ^2.13.1 \|\| ^3.2	—	—
doctrine/cache Version ^1.12.1 \|\| ^2.1.1	—	—
doctrine/lexer Version ^1.2.3	—	—
doctrine/common Version ^3.0.3	—	—