This is a very young, minimally documented package with only one release, no license, no README, no tests, and a single registry maintainer, so adopting it carries meaningful maturity, transparency, and continuity risk. The linked repository does match the package and is not archived, and the package has no install-time scripts or registry deprecation, which are positive signs; however, there is not yet enough release or maintenance history to establish dependable long-term support.
48%
Total Score
50
61
67
The package is 0 days old with only one release, so there is no demonstrated release cadence or maintenance history to support confidence in long-term dependability.
No declared license or license file was found, leaving the legal terms for using and redistributing this dependency unclear.
Only one account has registry publish access. That is a thin publishing base for continuity, and no organization backing is shown to compensate for the concentration.
The package is a small, focused nine-file source tree, which limits complexity, but it also contains no visible tests or documentation files to demonstrate behavior and supportability.
The artifact and repository contain no README, tests, or changelog. GitHub Releases are used, but the absence of basic usage and validation documentation remains a material transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^3.6 | — | — |
doctrine/dbal Version ^4.4 | — | — |
symfony/cache Version ^7.4 | — | — |
doctrine/migrations Version ^3.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.