The README, tests, small runtime dependency set, and explicit LGPL license make the package reasonably transparent to integrate. Its organization-backed, non-archived repository does not offset the lack of current maintenance, so adopting it carries substantial abandonment risk.
42%
Total Score
50
75
75
The latest release was published in June 2018, with no releases in the last 12 months; the package has had no new release for about 8 years. Its 14-release history shows earlier development but does not compensate for the prolonged inactivity.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the stale release history and indicating no current maintenance capacity.
The repository has 0 stars and 1 fork, providing little supporting evidence of active community use or review. Popularity is only supporting evidence, so this reinforces rather than determines the assessment.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much more serious maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.