casbin/database-adapter

This is a generally credible, mature package: it has been released since 2018, is on a stable major version, is not deprecated or archived, has an Apache-2.0 license, includes tests and a matching repository, and has a recent release and repository push. The main concern is maintenance momentum: the repository recorded no commits or active maintainers in the last 3 months, despite one merged pull request, which suggests activity may be intermittent. Missing security scanning and a security policy, along with an undeclared GitHub Actions permission posture, are additional transparency and workflow-hygiene gaps. It appears usable as a dependency, but teams should verify ongoing maintenance before adopting it for security-sensitive authorization infrastructure.

Latest v2.1.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 7 years and has 20 releases, with a release in the last day; however, only one release occurred in the last 12 months, indicating a relatively low release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last 3 months, a meaningful maintenance-momentum concern despite the recent push and release.

Repo popularity

The repository has 30 stars and 6 forks, modest supporting adoption evidence consistent with a small specialized adapter; popularity is not strong enough to materially offset maintenance concerns.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the repository.

Security policy

No repository security policy was found, reducing vulnerability-reporting transparency for a package used in authorization integrations.