It has a clear MIT license, tests, a changelog, and recent releases. Maintenance is concentrated in one contributor, and all nine workflow actions are unpinned.
15%
Total Score
67
71
50
Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe adoption and maintenance risk.
The linked repository is archived, which strongly indicates that normal future maintenance is not expected. Recent pushes do not compensate for the repository's archived state.
One contributor made 100% of the recent commits, creating a high concentration risk. Organization backing provides some handoff capacity, but no second active contributor is shown.
The repository recorded 8 commits in the last 3 months, showing recent activity, but all activity came from only one active maintainer. This is limited compensation for the broader maintenance concerns.
No repository security policy was found. This is a modest transparency gap, but it is secondary to the package's maintenance status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^4.3 | — | — |
broadway/broadway Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.